es配置了HTTPS，那用Rest API要如何访问啊？

我想问下使用nginx负载到es集群，用于数据写入是否可行，比如前端，客户端的指标数据上送，就不需要单独开发应用去做中间转换。直接使用es的api进行写入。可是我又怕这样会有安全问题和性能问题，老师有没有好点的建议？

生产环境如果要避免错误提示问题，需要购买收费证书么？

老师你好，es 做https访问，cerebro 需要怎么配置能连接上es，配置文件中application.conf hosts = [ { host = "https://localhost:9200" name = "node-1" # headers-whitelist = [ "x-proxy-user", "x-proxy-roles", "X-Forwarded-For" ] } # Example of host with authentication #{ # host = "https://localhost:9200" # name = "Secured Cluster" #auth = { # username = "elastic" #password = "passwd" #}

xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12 配置之后，访问ES，HTTPS没有生效...没查出来哪里出了问题...

$ ./bin/elasticsearch-setup-passwords interactive SSL connection to https://192.168.56.131:9200/_security/_authenticate?pretty failed: No subject alternative names present Please check the elasticsearch SSL settings under xpack.security.http.ssl. ERROR: Failed to establish SSL connection to elasticsearch at https://192.168.56.131:9200/_security/_authenticate?pretty. 执行设置用户密码报错这时什么问题 这时配置 path.data: /opt/app/elasticsearch-7.1.0/data/ xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12 xpack.license.self_generated.type: basic xpack.security.http.ssl.enabled: true xpack.security.http.ssl.keystore.path: certs/elastic-certificates.p12 xpack.security.http.ssl.truststore.path: certs/elastic-certificates.p12

老师你好，我想问下，logstash 连接 加密得es如何设置？是否有推荐得文章参考，谢谢

老师，你好，我想学习一下kafka和zookeeper添加基本认证的内容，自己试了一下没成功，能否发一下教程或者文档，谢谢

老师 是把xpack.security.enabled 设置为true后 必须使用证书吗 我现在把这个设置为true后 第一次启动没有问题 再次启动就会报错：Transport SSL must be enabled if security is enabled on a [basic] license. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled] to [false]

老师，您好。我这边还有个需求：需要实现匿名登录，意思是说：在打开Kibana后，不用输入用户名和密码就能只读地访问部分Visualization、Dashboard等。请问老师：这个用x-pack的话怎么实现？