<div id="readability-page-1" class="page"><div id="post-body-6280009845946934528" itemprop="articleBody">
On master node클러스터 마스터 노드 설정(elasticsearch.yml).
<div><table><tbody><tr><td><div>#&nbsp;Enable&nbsp;encryption&nbsp;and&nbsp;mutual&nbsp;authentication&nbsp;between&nbsp;cluster&nbsp;nodesxpack.security.transport.ssl:&nbsp;&nbsp;enabled:&nbsp;true&nbsp;&nbsp;verification_mode:&nbsp;certificate&nbsp;&nbsp;keystore.path:&nbsp;certs/transport.p12&nbsp;&nbsp;truststore.path:&nbsp;certs/transport.p12#&nbsp;Create&nbsp;a&nbsp;new&nbsp;cluster&nbsp;with&nbsp;the&nbsp;current&nbsp;node&nbsp;only#&nbsp;Additional&nbsp;nodes&nbsp;can&nbsp;still&nbsp;join&nbsp;the&nbsp;cluster&nbsp;latercluster.initial_master_nodes:&nbsp;["192.168.31.177"]<a name="more"></a>#&nbsp;Allow&nbsp;HTTP&nbsp;API&nbsp;connections&nbsp;from&nbsp;anywhere#&nbsp;Connections&nbsp;are&nbsp;encrypted&nbsp;and&nbsp;require&nbsp;user&nbsp;authenticationhttp.host:&nbsp;192.168.31.177#&nbsp;Allow&nbsp;other&nbsp;nodes&nbsp;to&nbsp;join&nbsp;the&nbsp;cluster&nbsp;from&nbsp;anywhere#&nbsp;Connections&nbsp;are&nbsp;encrypted&nbsp;and&nbsp;mutually&nbsp;authenticatedtransport.host:&nbsp;192.168.31.177</div></td><td><a href="http://colorscripter.com/info#e" target="_blank">cs</a></td></tr></tbody></table></div>
피어 노드용 토큰 생성.<div><table><tbody><tr><td><div>PS&nbsp;D:\ELK\elasticsearch-9.0.1\bin&gt;&nbsp;.\elasticsearch-create-enrollment-token&nbsp;-s&nbsp;nodeeyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMS4xNzc6OTIwMCJdLCJmZ3IiOiI0MTZlZTU1ZjU3MDhjZTE2MjU4NzRhNzliNzZmN2QwNDEyNjFkY2JjMmYyZDBiODBkYmE1MmE2ZGY5OGM5ZDY5Iiwia2V5IjoiZ05SdjNaWUJnYmZyWW51RzJhcnk6b1dwRXk5S1p6a19IYlVvemdXcHJnUSJ</div></td><td><a href="http://colorscripter.com/info#e" target="_blank">cs</a></td></tr></tbody></table></div>On peer node마스터 노드에서 생성한 토큰으로 노드 간 연동 실행.
<div><table><tbody><tr><td><div>[root@Centos7&nbsp;~]#&nbsp;/usr/share/elasticsearch/bin/elasticsearch-reconfigure-node&nbsp;--enrollment-token&nbsp;eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMS4xNzc6OTIwMCJdLCJmZ3IiOiI0MTZlZTU1ZjU3MDhjZTE2MjU4NzRhNzliNzZmN2QwNDEyNjFkY2JjMmYyZDBiODBkYmE1MmE2ZGY5OGM5ZDY5Iiwia2V5IjoiZ05SdjNaWUJnYmZyWW51RzJhcnk6b1dwRXk5S1p6a19IYlVvemdXcHJnUSJ9This&nbsp;node&nbsp;will&nbsp;be&nbsp;reconfigured&nbsp;to&nbsp;join&nbsp;an&nbsp;existing&nbsp;cluster,&nbsp;using&nbsp;the&nbsp;enrollment&nbsp;token&nbsp;that&nbsp;you&nbsp;provided.This&nbsp;operation&nbsp;will&nbsp;overwrite&nbsp;the&nbsp;existing&nbsp;configuration.&nbsp;Specifically:-&nbsp;Security&nbsp;auto&nbsp;configuration&nbsp;will&nbsp;be&nbsp;removed&nbsp;from&nbsp;elasticsearch.yml-&nbsp;The&nbsp;[certs]&nbsp;config&nbsp;directory&nbsp;will&nbsp;be&nbsp;removed-&nbsp;Security&nbsp;auto&nbsp;configuration&nbsp;related&nbsp;secure&nbsp;settings&nbsp;will&nbsp;be&nbsp;removed&nbsp;from&nbsp;the&nbsp;elasticsearch.keystoreDo&nbsp;you&nbsp;want&nbsp;to&nbsp;continue&nbsp;with&nbsp;the&nbsp;reconfiguration&nbsp;process&nbsp;[y/N]y</div></td><td><a href="http://colorscripter.com/info#e" target="_blank">cs</a></td></tr></tbody></table></div>
노드 연동 후 바뀐 피어 노드 설정(elasticsearch.yml).
<div><table><tbody><tr><td><div>#&nbsp;Enable&nbsp;encryption&nbsp;and&nbsp;mutual&nbsp;authentication&nbsp;between&nbsp;cluster&nbsp;nodesxpack.security.transport.ssl:&nbsp;&nbsp;enabled:&nbsp;true&nbsp;&nbsp;verification_mode:&nbsp;certificate&nbsp;&nbsp;keystore.path:&nbsp;certs/transport.p12&nbsp;&nbsp;truststore.path:&nbsp;certs/transport.p12#&nbsp;Discover&nbsp;existing&nbsp;nodes&nbsp;in&nbsp;the&nbsp;clusterdiscovery.seed_hosts:&nbsp;["192.168.31.177:9300"]#&nbsp;Allow&nbsp;HTTP&nbsp;API&nbsp;connections&nbsp;from&nbsp;anywhere#&nbsp;Connections&nbsp;are&nbsp;encrypted&nbsp;and&nbsp;require&nbsp;user&nbsp;authenticationhttp.host:&nbsp;0.0.0.0#&nbsp;Allow&nbsp;other&nbsp;nodes&nbsp;to&nbsp;join&nbsp;the&nbsp;cluster&nbsp;from&nbsp;anywhere#&nbsp;Connections&nbsp;are&nbsp;encrypted&nbsp;and&nbsp;mutually&nbsp;authenticatedtransport.host:&nbsp;0.0.0.0</div></td><td><a href="http://colorscripter.com/info#e" target="_blank">cs</a></td></tr></tbody></table></div>
피어 노드 서비스 시작. 그런데 안 된다.
<div><table><tbody><tr><td><div>[root@Centos7&nbsp;~]#&nbsp;service&nbsp;elasticsearch&nbsp;startRedirecting&nbsp;to&nbsp;/bin/systemctl&nbsp;start&nbsp;elasticsearch.serviceJob&nbsp;for&nbsp;elasticsearch.service&nbsp;failed&nbsp;because&nbsp;the&nbsp;control&nbsp;process&nbsp;exited&nbsp;with&nbsp;error&nbsp;code.&nbsp;See&nbsp;"systemctl&nbsp;status&nbsp;elasticsearch.service"&nbsp;and&nbsp;"journalctl&nbsp;-xe"&nbsp;for&nbsp;details.</div></td><td><a href="http://colorscripter.com/info#e" target="_blank">cs</a></td></tr></tbody></table></div>
에러 로그(elasticsearch.log)를 보니 머신러닝 기능과 운영체제 간 호환성 문제가 발생한 모양. 공식 문서에서는 <a href="https://www.elastic.co/docs/reference/elasticsearch/configuration-reference/machine-learning-settings" target="_blank">SSE4.2를 지원하는 프로세서가 필요하다</a>고 하는데 뭔소린지 모르겠다. 윈도우는 문제 없는 거 보니 가상머신이라 그런 듯. 버전 9에서 안 되는 게 많네(..)
<div><table><tbody><tr><td><div>[2025-05-22T22:25:41,459][ERROR][o.e.b.Elasticsearch&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;]&nbsp;[Centos7]&nbsp;fatal&nbsp;exception&nbsp;while&nbsp;booting&nbsp;Elasticsearchorg.elasticsearch.ElasticsearchException:&nbsp;Failure&nbsp;running&nbsp;machine&nbsp;learning&nbsp;native&nbsp;code.&nbsp;This&nbsp;could&nbsp;be&nbsp;due&nbsp;to&nbsp;running&nbsp;on&nbsp;an&nbsp;unsupported&nbsp;OS&nbsp;or&nbsp;distribution,&nbsp;missing&nbsp;OS&nbsp;libraries,&nbsp;or&nbsp;a&nbsp;problem&nbsp;with&nbsp;the&nbsp;temp&nbsp;directory.&nbsp;To&nbsp;bypass&nbsp;this&nbsp;problem&nbsp;by&nbsp;running&nbsp;Elasticsearch&nbsp;without&nbsp;machine&nbsp;learning&nbsp;functionality&nbsp;set&nbsp;[xpack.ml.enabled:&nbsp;false].</div></td><td><a href="http://colorscripter.com/info#e" target="_blank">cs</a></td></tr></tbody></table></div>
ML disable 설정 추가하면 실행된다.
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg83a-oBhdtupYqbf7FToI2EgPCHNWLiCPmco9S4jpPTQyqGDPvW8Sxt7r3tt8QqYoGV3ghxh16UR1TEGK4dH2t93SozJmb6GXxN6upjFwuI4TLnDkSAjlblXEcX5gY97ldARykXlF3gNCAeXsMjzB-gjuVFzirjQK1PTXHczNrp7uBiJbbPJQu9P-Ntpxp/s1225/xpack_ml_enabled.png"><img data-original-height="585" data-original-width="1225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg83a-oBhdtupYqbf7FToI2EgPCHNWLiCPmco9S4jpPTQyqGDPvW8Sxt7r3tt8QqYoGV3ghxh16UR1TEGK4dH2t93SozJmb6GXxN6upjFwuI4TLnDkSAjlblXEcX5gY97ldARykXlF3gNCAeXsMjzB-gjuVFzirjQK1PTXHczNrp7uBiJbbPJQu9P-Ntpxp/s16000/xpack_ml_enabled.png"></a>관련 글<div><ul><li><a href="https://kangmyounghun.blogspot.com/2025/05/elasticsearch-90-2nd.html">Elasticsearch 9.0의 변화 - 2nd</a></li><li><a href="https://kangmyounghun.blogspot.com/2025/04/elasticsearch-90.html">Elasticsearch 9.0의 변화</a></li><li><a href="https://kangmyounghun.blogspot.com/2023/11/elasticsearch-811.html">Elasticsearch 8.11의 변화</a></li><li><a href="https://kangmyounghun.blogspot.com/2025/05/filebeat-90.html">Filebeat 9.0의 변화</a></li></ul></div>

</div></div>

케세라세라

On master node
클러스터 마스터 노드 설정(elasticsearch.yml).
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Create a new cluster with the current node only
# Additional nodes can still join the cluster later
cluster.initial_master_nodes: ["192.168.31.177"]
 
# Allow HTTP API connections from anywhere
# Connections are encrypted and require user authentication
http.host: 192.168.31.177
 
# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
transport.host: 192.168.31.177
Colored by Color Scripter
cs
피어 노드용 토큰 생성.
PS D:\ELK\elasticsearch-9.0.1\bin> .\elasticsearch-create-enrollment-token -s node
eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMS4xNzc6OTIwMCJdLCJmZ3IiOiI0MTZlZTU1ZjU3MDhjZTE2MjU4NzRhNzliNzZmN2QwNDEyNjFkY2JjMmYyZDBiODBkYmE1MmE2ZGY5OGM5ZDY5Iiwia2V5IjoiZ05SdjNaWUJnYmZyWW51RzJhcnk6b1dwRXk5S1p6a19IYlVvemdXcHJnUSJ
cs
On peer node
마스터 노드에서 생성한 토큰으로 노드 간 연동 실행.
[root@Centos7 ~]# /usr/share/elasticsearch/bin/elasticsearch-reconfigure-node --enrollment-token eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMS4xNzc6OTIwMCJdLCJmZ3IiOiI0MTZlZTU1ZjU3MDhjZTE2MjU4NzRhNzliNzZmN2QwNDEyNjFkY2JjMmYyZDBiODBkYmE1MmE2ZGY5OGM5ZDY5Iiwia2V5IjoiZ05SdjNaWUJnYmZyWW51RzJhcnk6b1dwRXk5S1p6a19IYlVvemdXcHJnUSJ9
 
This node will be reconfigured to join an existing cluster, using the enrollment token that you provided.
This operation will overwrite the existing configuration. Specifically:
  - Security auto configuration will be removed from elasticsearch.yml
  - The [certs] config directory will be removed
  - Security auto configuration related secure settings will be removed from the elasticsearch.keystore
Do you want to continue with the reconfiguration process [y/N]y
Colored by Color Scripter
cs
노드 연동 후 바뀐 피어 노드 설정(elasticsearch.yml).
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Discover existing nodes in the cluster
discovery.seed_hosts: ["192.168.31.177:9300"]
 
# Allow HTTP API connections from anywhere
# Connections are encrypted and require user authentication
http.host: 0.0.0.0
 
# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
transport.host: 0.0.0.0
Colored by Color Scripter
cs
피어 노드 서비스 시작. 그런데 안 된다.
[root@Centos7 ~]# service elasticsearch start
Redirecting to /bin/systemctl start elasticsearch.service
Job for elasticsearch.service failed because the control process exited with error code. 
See "systemctl status elasticsearch.service" and "journalctl -xe" for details.
cs
에러 로그(elasticsearch.log)를 보니 머신러닝 기능과 운영체제 간 호환성 문제가 발생한 모양. 공식 문서에서는 SSE4.2를 지원하는 프로세서가 필요하다고 하는데 뭔소린지 모르겠다. 윈도우는 문제 없는 거 보니 가상머신이라 그런 듯. 버전 9에서 안 되는 게 많네(..)
[2025-05-22T22:25:41,459][ERROR][o.e.b.Elasticsearch      ] [Centos7] fatal exception while booting Elasticsearch
org.elasticsearch.ElasticsearchException: 
Failure running machine learning native code. 
This could be due to running on an unsupported OS or distribution, 
missing OS libraries, or a problem with the temp directory. 
To bypass this problem by running Elasticsearch without machine learning functionality set [xpack.ml.enabled: false].
cs
ML disable 설정 추가하면 실행된다.
관련 글
Elasticsearch 9.0의 변화 - 2nd
Elasticsearch 9.0의 변화
Elasticsearch 8.11의 변화
Filebeat 9.0의 변화

Elasticsearch 9.0의 변화 - 3rd

댓글