重置密码之后,ES集群中会新增一个名为.security-7的索引,其内容如下: _index _type _id password type enabled .security-7 _doc reserved-user-logstash_system pwd reserved-user true .security-7 _doc reserved-user-remote_monitoring_user pwd reserved-user true ..security-7 _doc reserved-user-kibana_system pwd reserved-user true .security-7 _doc reserved-user-beats_system pwd reserved-user true .security-7 _doc reserved-user-elastic pwd reserved-user true .security-7 _doc reserved-user-apm_system pwd reserved-user true .security-7 _doc reserved-user-kibana pwd reserved-user
以下设置被正确配置或移除: xpack.security.enabled: false 删除密码 curl -X DELETE -u elastic:passwd* "http://127.0.0.1:9200/.security
30:45,152][INFO ][o.e.x.s.s.SecurityIndexManager] [node1] security index does not exist, creating [.security nodes from other hosts [2022-12-14T14:30:45,325][INFO ][o.e.c.m.MetadataCreateIndexService] [node1] [.security 30:45,386][INFO ][o.e.x.s.s.SecurityIndexManager] [node1] security index does not exist, creating [.security "GREEN" message="Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.security -7][0]]])." previous.health="YELLOW" reason="shards started [[.security-7][0]]" ━━━━━━━━━━━━━━━━━━━━
open .kibana_task_manager aA2f1cDOSU6nqCx9P-hFPQ 1 0 2 4 45.1kb 45.1kb green open .security
uuid pri rep docs.count docs.deleted store.size pri.store.sizegreen open .security
vindex shard prirep state docs store ip node .security-7 0 p STARTED 2 12.4kb 192.168.10.134 es-hot2 .security-7 0 r STARTED 2 12.4kb 192.168.10.133 es-hot1 修改
或则尝试 删除 .security-7 索引,然后重新执行上面命令即可,不用重启es集群。 elastic 集群安全认证 输层安全性 (TLS) 传输层处理集群中节点之间的内部通信。
.monitoring-kibana-7-2020.03.26 ppiG3vIeQTmhYEVIZgpvww 1 1 2138 0 1.1mb 602.5kb green open .security
monitoring-kibana-7-2020.07.27", ".watches", ".monitoring-es-7-2020.07.24", ".security
.monitoring-kibana-7-2020.03.26 ppiG3vIeQTmhYEVIZgpvww 1 1 2138 0 1.1mb 602.5kbgreen open .security
monitoring-kibana-7-2020.07.27", ".watches", ".monitoring-es-7-2020.07.24", ".security
false .slm-history-3 .slm-history-3-000001 - - - false .security .security
0 p STARTED 0 249b 249b 172.20.246.81 quickstart-es-default-0 .security STARTED .apm-source-map 0 p STARTED .security
uuid pri rep docs.count docs.deleted store.size pri.store.size green open .security o.e.c.r.a.AllocationService] [node1] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.security