在之前的文章 “如何使用 Ansible自动化部署 Elastic Stack （一） 及 （二）”，我分别描述了如何使用 Ansible 来自动部署一个 Webserver 及 Elasticsearch。在今天的教程中，我来介绍如何安装 Kibana。如果你还没做完之前的练习，请先做那些练习。
部署 Kibana
和之前的安装部署步骤一样，我们先创建一个叫做 kibana 的角色：
-
$
pwd
-
/Users/liuxg/ansible/elasticsearch/roles
-
$
ansible-galaxy init kibana
-
- Role kibana was created successfully
如果你从来还没有安装过 Kibana，请参考我之前的文章 “如何在 Linux，MacOS 及 Windows 上安装 Elastic 栈中的 Kibana” 进行本地安装。你可以把 Kibana 安装到一个本地的目录中。这个安装的目的是为了拷贝它的 config/kibana.yml 文件。我们将以这个文件为蓝本进行对部署的 Kibana 进行个性化的配置。我们把 kibana.yml 文件拷入到 kibana/template 目录下：
我最原始的 kibana.yml 文件如下：
templates/kibana.yml
-
# Kibana is served by a back end server. This setting specifies the port to use.
-
server.port:
5601
-
-
# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
-
# The default is 'localhost', which usually means remote machines will not be able to connect.
-
# To allow connections from remote users, set this parameter to a non-loopback address.
-
server.host:
"0.0.0.0"
-
-
# Enables you to specify a path to mount Kibana at if you are running behind a proxy.
-
# Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
-
# from requests it receives, and to prevent a deprecation warning at startup.
-
# This setting cannot end in a slash.
-
#server.basePath: ""
-
-
# Specifies whether Kibana should rewrite requests that are prefixed with
-
# `server.basePath` or require that they are rewritten by your reverse proxy.
-
# This setting was effectively always `false` before Kibana 6.3 and will
-
# default to `true` starting in Kibana 7.0.
-
#server.rewriteBasePath: false
-
-
# The maximum payload size in bytes for incoming server requests.
-
#server.maxPayloadBytes: 1048576
-
-
# The Kibana server's name. This is used for display purposes.
-
server.name:
"demo-kibana"
-
-
# The URLs of the Elasticsearch instances to use for all your queries.
-
elasticsearch.hosts: [
"http://localhost:9200"]
-
-
# Kibana uses an index in Elasticsearch to store saved searches, visualizations and
-
# dashboards. Kibana creates a new index if the index doesn't already exist.
-
#kibana.index: ".kibana"
-
-
# The default application to load.
-
#kibana.defaultAppId: "home"
-
-
# If your Elasticsearch is protected with basic authentication, these settings provide
-
# the username and password that the Kibana server uses to perform maintenance on the Kibana
-
# index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
-
# is proxied through the Kibana server.
-
elasticsearch.username:
"kibana_system"
-
elasticsearch.password:
"password"
-
-
# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
-
# These settings enable SSL for outgoing requests from the Kibana server to the browser.
-
#server.ssl.enabled: false
-
#server.ssl.certificate: /path/to/your/server.crt
-
#server.ssl.key: /path/to/your/server.key
-
-
# Optional settings that provide the paths to the PEM-format SSL certificate and key files.
-
# These files are used to verify the identity of Kibana to Elasticsearch and are required when
-
# xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
-
#elasticsearch.ssl.certificate: /path/to/your/client.crt
-
#elasticsearch.ssl.key: /path/to/your/client.key
-
-
# Optional setting that enables you to specify a path to the PEM file for the certificate
-
# authority for your Elasticsearch instance.
-
#elasticsearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ]
-
-
# To disregard the validity of SSL certificates, change this setting's value to 'none'.
-
#elasticsearch.ssl.verificationMode: full
-
-
# Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
-
# the elasticsearch.requestTimeout setting.
-
#elasticsearch.pingTimeout: 1500
-
-
# Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
-
# must be a positive integer.
-
#elasticsearch.requestTimeout: 30000
-
-
# List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
-
# headers, set this value to [] (an empty list).
-
#elasticsearch.requestHeadersWhitelist: [ authorization ]
-
-
# Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
-
# by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
-
#elasticsearch.customHeaders: {}
-
-
# Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
-
#elasticsearch.shardTimeout: 30000
-
-
# Logs queries sent to Elasticsearch. Requires logging.verbose set to true.
-
#elasticsearch.logQueries: false
-
-
# Specifies the path where Kibana creates the process ID file.
-
#pid.file: /var/run/kibana.pid
-
-
# Enables you to specify a file where Kibana stores log output.
-
#logging.dest: stdout
-
-
# Set the value of this setting to true to suppress all logging output.
-
#logging.silent: false
-
-
# Set the value of this setting to true to suppress all logging output other than error messages.
-
#logging.quiet: false
-
-
# Set the value of this setting to true to log all events, including system usage information
-
# and all requests.
-
#logging.verbose: false
-
-
# Set the interval in milliseconds to sample system and process performance
-
# metrics. Minimum is 100ms. Defaults to 5000.
-
#ops.interval: 5000
-
-
# Specifies locale to be used for all localizable strings, dates and number formats.
-
# Supported languages are the following: English - en , by default , Chinese - zh-CN .
-
#i18n.locale: "en"
显然在上面的配置中，有很多都是固定的值。我们可以把我们需要配置的项挑出来，并在 defaults/main.yml 中做相应的变量定义：
有了上面的变量的定义，我们可以修改我们的 templates/main.yml 如下：
templates/main.yml
-
# Kibana is served by a back end server. This setting specifies the port to use.
-
server.port: {{
server_port }}
-
-
# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
-
# The default is 'localhost', which usually means remote machines will not be able to connect.
-
# To allow connections from remote users, set this parameter to a non-loopback address.
-
server.host:
"{{ server_host }}"
-
-
# Enables you to specify a path to mount Kibana at if you are running behind a proxy.
-
# Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
-
# from requests it receives, and to prevent a deprecation warning at startup.
-
# This setting cannot end in a slash.
-
#server.basePath: ""
-
-
# Specifies whether Kibana should rewrite requests that are prefixed with
-
# `server.basePath` or require that they are rewritten by your reverse proxy.
-
# This setting was effectively always `false` before Kibana 6.3 and will
-
# default to `true` starting in Kibana 7.0.
-
#server.rewriteBasePath: false
-
-
# The maximum payload size in bytes for incoming server requests.
-
#server.maxPayloadBytes: 1048576
-
-
# The Kibana server's name. This is used for display purposes.
-
server.name:
"{{ server_name }}"
-
-
# The URLs of the Elasticsearch instances to use for all your queries.
-
elasticsearch.hosts: [
"{{ elasticsearch_host }}"]
-
-
# Kibana uses an index in Elasticsearch to store saved searches, visualizations and
-
# dashboards. Kibana creates a new index if the index doesn't already exist.
-
#kibana.index: ".kibana"
-
-
# The default application to load.
-
#kibana.defaultAppId: "home"
-
-
# If your Elasticsearch is protected with basic authentication, these settings provide
-
# the username and password that the Kibana server uses to perform maintenance on the Kibana
-
# index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
-
# is proxied through the Kibana server.
-
elasticsearch.username:
"kibana_system"
-
elasticsearch.password:
"password"
-
-
# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
-
# These settings enable SSL for outgoing requests from the Kibana server to the browser.
-
#server.ssl.enabled: false
-
#server.ssl.certificate: /path/to/your/server.crt
-
#server.ssl.key: /path/to/your/server.key
-
-
# Optional settings that provide the paths to the PEM-format SSL certificate and key files.
-
# These files are used to verify the identity of Kibana to Elasticsearch and are required when
-
# xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
-
#elasticsearch.ssl.certificate: /path/to/your/client.crt
-
#elasticsearch.ssl.key: /path/to/your/client.key
-
-
# Optional setting that enables you to specify a path to the PEM file for the certificate
-
# authority for your Elasticsearch instance.
-
#elasticsearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ]
-
-
# To disregard the validity of SSL certificates, change this setting's value to 'none'.
-
#elasticsearch.ssl.verificationMode: full
-
-
# Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
-
# the elasticsearch.requestTimeout setting.
-
#elasticsearch.pingTimeout: 1500
-
-
# Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
-
# must be a positive integer.
-
#elasticsearch.requestTimeout: 30000
-
-
# List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
-
# headers, set this value to [] (an empty list).
-
#elasticsearch.requestHeadersWhitelist: [ authorization ]
-
-
# Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
-
# by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
-
#elasticsearch.customHeaders: {}
-
-
# Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
-
#elasticsearch.shardTimeout: 30000
-
-
# Logs queries sent to Elasticsearch. Requires logging.verbose set to true.
-
#elasticsearch.logQueries: false
-
-
# Specifies the path where Kibana creates the process ID file.
-
#pid.file: /var/run/kibana.pid
-
-
# Enables you to specify a file where Kibana stores log output.
-
#logging.dest: stdout
-
-
# Set the value of this setting to true to suppress all logging output.
-
#logging.silent: false
-
-
# Set the value of this setting to true to suppress all logging output other than error messages.
-
#logging.quiet: false
-
-
# Set the value of this setting to true to log all events, including system usage information
-
# and all requests.
-
#logging.verbose: false
-
-
# Set the interval in milliseconds to sample system and process performance
-
# metrics. Minimum is 100ms. Defaults to 5000.
-
#ops.interval: 5000
-
-
# Specifies locale to be used for all localizable strings, dates and number formats.
-
# Supported languages are the following: English - en , by default , Chinese - zh-CN .
-
#i18n.locale: "en"
接下来，我们在 tasks/main.yml 里创建我们的任务：
tasks/main.yml
-
---
-
# tasks file for kibana
-
-
# Installing Kibana
-
-
name:
Installing
Kibana
with
apt
-
apt:
-
name:
kibana
-
update_cache:
yes
-
-
# Replacing default kibana.yml with updated file
-
-
name:
Replacing
default
kibana.yml
with
updated
file
-
template:
-
src:
kibana.yml
-
dest:
/etc/kibana/kibana.yml
-
-
# Starting Kibana
-
-
name:
Starting
Kibana
-
service:
-
name:
kibana
-
state:
started
-
enabled:
yes
我们接下来修改 deploy-demo.yml 文件：
playbooks/deploy-demo.yml
-
---
-
# This playbook will deploy webserver
-
-
hosts:
all
-
become:
yes
-
roles:
-
-
../roles/add-elastic-repo
-
-
# This playbook will deploy ELK stack
-
-
hosts:
elk
-
become:
yes
-
roles:
-
-
../roles/elasticsearch
-
-
../roles/kibana
我们使用如下的命令来进行部署：
ansible-playbook -K -i inventory/hosts.yml playbooks/deploy-demo.yml
-
$ pwd
-
/Users/liuxg/ansible/elasticsearch
-
$ ansible-playbook -K -i inventory/hosts.yml playbooks/deploy-demo.yml
-
BECOME password:
-
-
PLAY [all]
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
*
-
-
TASK [Gathering Facts] *********************************************************
-
ok: [192.168.0.4]
-
-
TASK [../roles/add-elastic-repo : add elasticsearch public signing key]
****
****
-
ok: [192.168.0.4]
-
-
TASK [../roles/add-elastic-repo : Install apt-transport-https]
****
****
****
****
*
-
ok: [192.168.0.4]
-
-
TASK [../roles/add-elastic-repo : Add elasticsearch repo definitions] **********
-
ok: [192.168.0.4]
-
-
TASK [../roles/add-elastic-repo : system update] **
****
****
****
****
****
****
*****
-
changed: [192.168.0.4]
-
-
PLAY [elk]
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
*
-
-
TASK [Gathering Facts] *********************************************************
-
ok: [192.168.0.4]
-
-
TASK [../roles/elasticsearch : Installing Elasticsearch]
****
****
****
****
****
***
-
ok: [192.168.0.4]
-
-
TASK [../roles/elasticsearch : Replace default elasticsearch.yml] **************
-
ok: [192.168.0.4]
-
-
TASK [../roles/elasticsearch : service] ****************************************
-
ok: [192.168.0.4]
-
-
TASK [../roles/kibana : Installing Kibana with apt] ****************************
-
ok: [192.168.0.4]
-
-
TASK [../roles/kibana : Replacing default kibana.yml with updated file] ********
-
changed: [192.168.0.4]
-
-
TASK [../roles/kibana : Starting Kibana] ***************************************
-
changed: [192.168.0.4]
-
-
PLAY RECAP **
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
****
***
-
192.168.0.4 : ok=12 changed=3 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
上面的输出结果显示我们的安装是成功的。我们在 MacOS 的浏览器中打入如下的地址 ubuntu:5601。
上面显示我们的安装是成功的。我们也可以到 Ubuntu 的机器上进入查看：
service kibana status
上面显示 kibana 服务已经被成功运行起来了。
转载：https://blog.csdn.net/UbuntuTouch/article/details/113132041
查看评论