1.ES 安裝x-pack外掛

（離線安裝請參考官方文件）官方文件在此

先停止es程序，進入es目錄 ，執行命令bin/elasticsearch-plugin install x-pack ，安裝過程如下

[es@elk elasticsearch-6.2.2]$ bin/elasticsearch-plugin install x-pack
-> Downloading x-pack from elastic
[=================================================] 100%   
@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@     WARNING: plugin requires additional permissions     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
* java.io.FilePermission \\.\pipe\* read,write
* java.lang.RuntimePermission accessClassInPackage.com.sun.activation.registries
* java.lang.RuntimePermission getClassLoader
* java.lang.RuntimePermission setContextClassLoader
* java.lang.RuntimePermission setFactory
* java.net.SocketPermission * connect,accept,resolve
* java.security.SecurityPermission createPolicy.JavaPolicy
* java.security.SecurityPermission getPolicy
* java.security.SecurityPermission putProviderProperty.BC
* java.security.SecurityPermission setPolicy
* java.util.PropertyPermission * read,write
See http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html
 

for descriptions of what these permissions allow and the associated risks.

Continue with installation? [y/N]y
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@        WARNING: plugin forks a native controller        @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
This plugin launches a native controller that is not subject to the Java
security manager nor to system
 
 call filters.

Continue with installation? [y/N]y
-> Installed x-pack with: x-pack-core,x-pack-ml,x-pack-graph,x-pack-upgrade,x-pack-deprecation,x-pack-logstash,x-pack-security,x-pack-monitoring,x-pack-watcher

安裝成功後可以啟動es： bin/elasticsearch
使用命令 ：bin/x-pack/setup-passwords interactive 分別修改 elastic, kibana, 和 logstash_system 這三個使用者的密碼。

2.kibana 安裝x-pack

(離線安裝參考官方文件）官方文件在此
同樣先停止kibana程序，進入kibana目錄，執行命令：bin/kibana-plugin install x-pack 安裝外掛
外掛安裝比較慢，耐心等待

[[email protected] kibana]# bin/kibana-plugin install x-pack
Attempting to transfer from x-pack
Attempting to transfer from https://artifacts.elastic.co/downloads/kibana-plugins/x-pack/x-pack-6.2.2.zip
Transferring 269704442 bytes....................
Transfer complete
Retrieving metadata from plugin archive
Extracting plugin archive
Extraction complete
Optimizing and caching browser bundles...
Plugin installation complete

修改kibana的配置檔案 kibana.yml 新增上如下配置:

elasticsearch.username: "kibana"
elasticsearch.password: "kibanapassword"

這裡的kibana的使用者名稱以及密碼，是剛剛上文設定的。
重新啟動kibana，完成 bin/kibana
啟動後，會看到幾條報錯 ：

[warning][reporting] Generating a random key for xpack.reporting.encryptionKey. To prevent pending reports from failing on restart, please set xpack.reporting.encryptionKey in kibana.yml
[warning][security] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in kibana.yml

[warning][security] Session cookies will be transmitted over insecure connections. This is not recommended.

根據第一條報錯，新增如下配置到kibana.yml：
xpack.security.encryptionKey: "something_at_least_32_characters"
xpack.reporting.encryptionKey: "a_random_string"

第二條報錯，應該是沒有SSL配置造成的，根據官方文件配置好SSL的配置就應該可以了