阅读量:0
系列文章目录
第一章 es集群搭建
第二章 es集群基本操作命令
第三章 es基于search-guard插件实现加密认证
第四章 es常用插件
文章目录
- 系列文章目录
- 前言
- 一、elasticdump是什么？
- 二、安装elasticdump工具
- 三、elasticdump相关参数
- 四、使用elasticdump进行数据备份
- 五、使用elasticdump进行数据恢复
前言
在企业实际生产环境中,避免不了要对es集群进行迁移、数据备份与恢复，以此来确保数据的可用性及完整性。因此，就涉及到了数据备份与恢复。本章主要以elasticdump工具为主，讲解备份操作及恢复操作。其余备份和恢复方法暂不涉及，总结来自于生产实战。
| 迁移方式 | 使用场景 |
|---|---|
| logstash | 迁移全量或增量数据，且对实时性要求不高的场景需要对迁移的数据通过 es query 进行简单的过滤的场景需要对迁移的数据进行复杂的过滤或处理的场景版本跨度较大的数据迁移场景，如 5.x 版本迁移到 6.x 版本或 7.x 版本 |
| elasticdump | 数据量较小的场景 |
一、elasticdump是什么？
Elasticdump 是一个开源免费且用于导入和导出 Elasticsearch 数据的命令行工具。它提供了一种方便的方式来在不同的 Elasticsearch 实例之间传输数据，或者进行数据备份和恢复。 使用 Elasticdump，可以将 Elasticsearch 索引中的数据导出为 JSON 文件，或者将 JSON 文件中的数据导入到 Elasticsearch 索引中。它支持各种选项和过滤器，用于指定源和目标，包括索引模式、文档类型、查询过滤器等等。 主要特征包括： 支持在Elasticsearch实例或者集群之间传输和备份数据。可以将数据从一个集群复制到另一个集群。 支持不同格式的数据传输,包括JSON、NDJSON、CSV、备份文件等。 可以通过命令行或者程序化的方式使用。命令行方式提供了便捷的操作接口。 支持增量式同步,只复制目标集群中不存在的文档。 支持各种认证方式连接Elasticsearch,如basic auth、Amazon IAM等。 支持多线程操作,可以加快数据迁移的速度。 开源免费,代码托管在GitHub上。 不足: elasticdump工具适用于备份单个索引或者整个es集群索引不太大的备份,如果es集群数据量较大，则需要使用logstash方法进行迁移恢复。 二、安装elasticdump工具
1.离线安装
背景: elasticdump工具依赖node环境 1、离线安装node方式 (服务器为纯内网环境) 下载node安装包 https://nodejs.org/dist/v16.14.0/node-v16.14.0-linux-x64.tar.xz 上传至服务器 rz node-v16.14.0-linux-x64.tar.xz 解压并安装 tar xf node-v16.14.0-linux-x64.tar.xz -C /usr/local/ mv /usr/local/node-v16.14.0-linux-x64 /usr/local/node 配置环境变量并重新加载 vim /etc/profile export NODE_HOME=/usr/local/node export PATH=$NODE_HOME/bin:$PATH source /etc/profile 验证安装是否成功 node -v #安装成功此命令会返回node对应的版本信息 npm -v 2、离线安装elasticdump 本地下载对应的工具包 https://github.com/elasticsearch-dump/elasticsearch-dump/archive/v6.19.0.tar.gz 上传至服务器 rz v6.19.0.tar.gz 解压安装 tar xf v6.19.0.tar.gz -C /export/server/ 检查是否安装成功 elasticdump --version 2.在线安装
背景: elasticdump工具依赖node环境 1、在线安装node方式 (服务器可通外网) #下载node安装包 wget https://nodejs.org/dist/v16.14.0/node-v16.14.0-linux-x64.tar.xz #解压并安装 tar xf node-v16.14.0-linux-x64.tar.xz -C /usr/local/ mv /usr/local/node-v16.14.0-linux-x64 /usr/local/node #配置环境变量并重新加载 vim /etc/profile export NODE_HOME=/usr/local/node export PATH=$NODE_HOME/bin:$PATH source /etc/profile #验证安装是否成功 node -v #安装成功此命令会返回node对应的版本信息 npm -v #或者直接采用yum命令安装node环境 yum -y install nodejs npm 2、在线安装elasticdump #设置npm源 否则安装会很慢 npm config set registry https://registry.npm.taobao.org/ #全局安装 npm install elasticdump -g #检查是否安装成功 elasticdump --version 三、elasticdump相关参数
#相关参数 可以使用elasticdump --help查看 --input: 指定输入的源位置 Elasticsearch 实例或JSON文件; --output: 指定输出的目标位置 Elasticsearch实例或JSON文件; --type:指定要操作的数据类型，包括index、alias、template、data analyzers等; --searchBody:对于输入为Elasticsearch实例时，指定一个JSON对象作为查询参数; --limit:限制导出的文档数。通的导入导出是100条数据一次，如果是大批量数据的话就很耗时间。limit是一个限制大小的参数，可以根据需求来进行调整其大小。 --inputIndex:指定输入源 Elasticsearch实例的索引名称; --ignore-errors:忽略出错的文档，继续导出其余文档。 --scrollTime:设置scroll时间，以毫秒为单位。默认为10分钟。 --timeout:设置请求超时时间，以毫秒为单位。默认为30秒。 --support-big-int 支持大数类型 --big-int-fields 指定支持的字段，默认是''(default '') --bulk-1imit:设置批量操作中的文档数量限制默认为1000 官网给出的参数 elasticdump: Import and export tools for elasticsearch version: %%version%% Usage: elasticdump --input SOURCE --output DESTINATION [OPTIONS] Core options -------------------- --input Source location (required) --input-index Source index and type (default: all, example: index/type) --output Destination location (required) --output-index Destination index and type (default: all, example: index/type) Options -------------------- --big-int-fields Specifies a comma-seperated list of fields that should be checked for big-int support (default '') --bulkAction Sets the operation type to be used when preparing the request body to be sent to elastic search. For more info - https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html (default: index, options: [index, update, delete, create) --ca, --input-ca, --output-ca CA certificate. Use --ca if source and destination are identical. Otherwise, use the one prefixed with --input or --output as needed. --cert, --input-cert, --output-cert Client certificate file. Use --cert if source and destination are identical. Otherwise, use the one prefixed with --input or --output as needed. --csvConfigs Set all fast-csv configurations A escaped JSON string or file can be supplied. File location must be prefixed with the @ symbol (default: null) --csvCustomHeaders A comma-seperated listed of values that will be used as headers for your data. This param must be used in conjunction with `csvRenameHeaders` (default : null) --csvDelimiter The delimiter that will separate columns. (default : ',') --csvFirstRowAsHeaders If set to true the first row will be treated as the headers. (default : true) --csvHandleNestedData Set to true to handle nested JSON/CSV data. NB : This is a very opinionated implementaton ! (default : false) --csvIdColumn Name of the column to extract the record identifier (id) from When exporting to CSV this column can be used to override the default id (@id) column name (default : null) --csvIgnoreAutoColumns Set to true to prevent the following columns @id, @index, @type from being written to the output file (default : false) --csvIgnoreEmpty Set to true to ignore empty rows. (default : false) --csvIncludeEndRowDelimiter Set to true to include a row delimiter at the end of the csv (default : false) --csvIndexColumn Name of the column to extract the record index from When exporting to CSV this column can be used to override the default index (@index) column name (default : null) --csvLTrim Set to true to left trim all columns. (default : false) --csvMaxRows If number is > 0 then only the specified number of rows will be parsed.(e.g. 100 would return the first 100 rows of data) (default : 0) --csvRTrim Set to true to right trim all columns. (default : false) --csvRenameHeaders If you want the first line of the file to be removed and replaced by the one provided in the `csvCustomHeaders` option (default : true) --csvSkipLines If number is > 0 the specified number of lines will be skipped. (default : 0) --csvSkipRows If number is > 0 then the specified number of parsed rows will be skipped NB: (If the first row is treated as headers, they aren't a part of the count) (default : 0) --csvTrim Set to true to trim all white space from columns. (default : false) --csvTypeColumn Name of the column to extract the record type from When exporting to CSV this column can be used to override the default type (@type) column name (default : null) --csvWriteHeaders Determines if headers should be written to the csv file. (default : true) --customBackoff Activate custom customBackoff function. (s3) --debug Display the elasticsearch commands being used (default: false) --delete Delete documents one-by-one from the input as they are moved. Will not delete the source index (default: false) --delete-with-routing Passes the routing query-param to the delete function used to route operations to a specific shard. (default: false) --esCompress if true, add an Accept-Encoding header to request compressed content encodings from the server (if not already present) and decode supported content encodings in the response. Note: Automatic decoding of the response content is performed on the body data returned through request (both through the request stream and passed to the callback function) but is not performed on the response stream (available from the response event) which is the unmodified http.IncomingMessage object which may contain compressed data. See example below. --fileSize supports file splitting. This value must be a string supported by the **bytes** module. The following abbreviations must be used to signify size in terms of units b for bytes kb for kilobytes mb for megabytes gb for gigabytes tb for terabytes e.g. 10mb / 1gb / 1tb Partitioning helps to alleviate overflow/out of memory exceptions by efficiently segmenting files into smaller chunks that then can be merged if needs be. --filterSystemTemplates Whether to remove metrics-*-* and logs-*-* system templates (default: true]) --force-os-version Forces the OpenSearch version used by elasticsearch-dump. (default: 7.10.2) --fsCompress gzip data before sending output to file. On import the command is used to inflate a gzipped file --handleVersion Tells elastisearch transport to handle the `_version` field if present in the dataset (default : false) --headers Add custom headers to Elastisearch requests (helpful when your Elasticsearch instance sits behind a proxy) (default: '{"User-Agent": "elasticdump"}') Type/direction based headers are supported .i.e. input-headers/output-headers (these will only be added based on the current flow type input/output) --help This page --ignore-errors Will continue the read/write loop on write error (default: false) --ignore-es-write-errors Will continue the read/write loop on a write error from elasticsearch (default: true) --inputSocksPort, --outputSocksPort Socks5 host port --inputSocksProxy, --outputSocksProxy Socks5 host address --inputTransport Provide a custom js file to use as the input transport --key, --input-key, --output-key Private key file. Use --key if source and destination are identical. Otherwise, use the one prefixed with --input or --output as needed. --limit How many objects to move in batch per operation limit is approximate for file streams (default: 100) --maxRows supports file splitting. Files are split by the number of rows specified --maxSockets How many simultaneous HTTP requests can the process make? (default: 5 [node <= v0.10.x] / Infinity [node >= v0.11.x] ) --noRefresh Disable input index refresh. Positive: 1. Much increased index speed 2. Much less hardware requirements Negative: 1. Recently added data may not be indexed Recommended using with big data indexing, where speed and system health is a higher priority than recently added data. --offset Integer containing the number of rows you wish to skip ahead from the input transport. When importing a large index, things can go wrong, be it connectivity, crashes, someone forgets to `screen`, etc. This allows you to start the dump again from the last known line written (as logged by the `offset` in the output). Please be advised that since no sorting is specified when the dump is initially created, there's no real way to guarantee that the skipped rows have already been written/parsed. This is more of an option for when you want to get as much data as possible in the index without concern for losing some rows in the process, similar to the `timeout` option. (default: 0) --outputTransport Provide a custom js file to use as the output transport --overwrite Overwrite output file if it exists (default: false) --params Add custom parameters to Elastisearch requests uri. Helpful when you for example want to use elasticsearch preference --input-params is a specific params extension that can be used when fetching data with the scroll api --output-params is a specific params extension that can be used when indexing data with the bulk index api NB : These were added to avoid param pollution problems which occur when an input param is used in an output source (default: null) --parseExtraFields Comma-separated list of meta-fields to be parsed --pass, --input-pass, --output-pass Pass phrase for the private key. Use --pass if source and destination are identical. Otherwise, use the one prefixed with --input or --output as needed. --quiet Suppress all messages except for errors (default: false) --retryAttempts Integer indicating the number of times a request should be automatically re-attempted before failing when a connection fails with one of the following errors `ECONNRESET`, `ENOTFOUND`, `ESOCKETTIMEDOUT`, ETIMEDOUT`, `ECONNREFUSED`, `EHOSTUNREACH`, `EPIPE`, `EAI_AGAIN` (default: 0) --retryDelay Integer indicating the back-off/break period between retry attempts (milliseconds) (default : 5000) --retryDelayBase The base number of milliseconds to use in the exponential backoff for operation retries. (s3) --scroll-with-post Use a HTTP POST method to perform scrolling instead of the default GET (default: false) --scrollId The last scroll Id returned from elasticsearch. This will allow dumps to be resumed used the last scroll Id & `scrollTime` has not expired. --scrollTime Time the nodes will hold the requested search in order. (default: 10m) --searchBody Preform a partial extract based on search results when ES is the input, default values are if ES > 5 `'{"query": { "match_all": {} }, "stored_fields": ["*"], "_source": true }'` else `'{"query": { "match_all": {} }, "fields": ["*"], "_source": true }'` [As of 6.68.0] If the searchBody is preceded by a @ symbol, elasticdump will perform a file lookup in the location specified. NB: File must contain valid JSON --searchBodyTemplate A method/function which can be called to the searchBody doc.searchBody = { query: { match_all: {} }, stored_fields: [], _source: true }; May be used multiple times. Additionally, searchBodyTemplate may be performed by a module. See [searchBody Template](#search-template) below. --searchWithTemplate Enable to use Search Template when using --searchBody If using Search Template then searchBody has to consist of "id" field and "params" objects If "size" field is defined within Search Template, it will be overridden by --size parameter See https://www.elastic.co/guide/en/elasticsearch/reference/current/search-template.html for further information (default: false) --size How many objects to retrieve (default: -1 -> no limit) --skip-existing Skips resource_already_exists_exception when enabled and exit with success (default: false) --sourceOnly Output only the json contained within the document _source Normal: {"_index":"","_type":"","_id":"", "_source":{SOURCE}} sourceOnly: {SOURCE} (default: false) --support-big-int Support big integer numbers --templateRegex Regex used to filter templates before passing to the output transport (default: ((metrics|logs|\..+)(-.+)?) --timeout Integer containing the number of milliseconds to wait for a request to respond before aborting the request. Passed directly to the request library. Mostly used when you don't care too much if you lose some data when importing but would rather have speed. --tlsAuth Enable TLS X509 client authentication --toLog When using a custom outputTransport, should log lines be appended to the output stream? (default: true, except for `$`) --transform A method/function which can be called to modify documents before writing to a destination. A global variable 'doc' is available. Example script for computing a new field 'f2' as doubled value of field 'f1': doc._source["f2"] = doc._source.f1 * 2; May be used multiple times. Additionally, transform may be performed by a module. See [Module Transform](#module-transform) below. --type What are we exporting? (default: data, options: [index, settings, analyzer, data, mapping, policy, alias, template, component_template, index_template]) --versionType Elasticsearch versioning types. Should be `internal`, `external`, `external_gte`, `force`. NB : Type validation is handled by the bulk endpoint and not by elasticsearch-dump AWS specific options -------------------- --awsAccessKeyId and --awsSecretAccessKey When using Amazon Elasticsearch Service protected by AWS Identity and Access Management (IAM), provide your Access Key ID and Secret Access Key. --sessionToken can also be optionally provided if using temporary credentials --awsChain Use [standard](https://aws.amazon.com/blogs/security/a-new-and-standardized-way-to-manage-credentials-in-the-aws-sdks/) location and ordering for resolving credentials including environment variables, config files, EC2 and ECS metadata locations _Recommended option for use with AWS_ --awsIniFileName Override the default aws ini file name when using --awsIniFileProfile Filename is relative to ~/.aws/ (default: config) --awsIniFileProfile Alternative to --awsAccessKeyId and --awsSecretAccessKey, loads credentials from a specified profile in aws ini file. For greater flexibility, consider using --awsChain and setting AWS_PROFILE and AWS_CONFIG_FILE environment variables to override defaults if needed --awsRegion Sets the AWS region that the signature will be generated for (default: calculated from hostname or host) --awsService Sets the AWS service that the signature will be generated for (default: calculated from hostname or host) --awsUrlRegex Overrides the default regular expression that is used to validate AWS urls that should be signed (default: ^https?:\/\/.*\.amazonaws\.com.*$) --s3ACL S3 ACL: private | public-read | public-read-write | authenticated-read | aws-exec-read | bucket-owner-read | bucket-owner-full-control [default private] --s3AccessKeyId AWS access key ID --s3Compress gzip data before sending to s3 --s3Configs Set all s3 constructor configurations A escaped JSON string or file can be supplied. File location must be prefixed with the @ symbol (default: null) --s3Endpoint AWS endpoint that can be used for AWS compatible backends such as OpenStack Swift and OpenStack Ceph --s3ForcePathStyle Force path style URLs for S3 objects [default false] --s3Options Set all s3 parameters shown here https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.html#createMultipartUpload-property A escaped JSON string or file can be supplied. File location must be prefixed with the @ symbol (default: null) --s3Region AWS region --s3SSEKMSKeyId KMS Id to be used with aws:kms uploads --s3SSLEnabled Use SSL to connect to AWS [default true] --s3SecretAccessKey AWS secret access key --s3ServerSideEncryption Enables encrypted uploads --s3StorageClass Set the Storage Class used for s3 (default: STANDARD) 四、使用elasticdump进行数据备份
1、数据备份之备份单个索引 当es集群配置了分词器后,首先需要导出分词 #导出分词器的时候要特别注意，我们只能根据索引单个导，不能全部导出，全部导出会出现索引不存在的错误： /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input http://用户名:密码@ip地址:9200/索引名 --output /export/分词文件名.json --type=analyzer(指定导出分词) --limit=10000 (限制大小) 导出mapping结构 /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input http://用户名:密码@ip地址:9200/索引名 --output /export/mapping文件名.json --type=mapping(指定导出结构) --limit=10000 #导出结构 导出数据 /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input http://用户名:密码@ip地址:9200/索引名 --output /export/数据文件名.json --type=data(导出数据) --limit=10000 #导出数据 2、数据备份之备份多个索引(前提是总索引数据不超过1G) 查看全部索引大小 如下所示 curl -X GET http://ip:9200/_cat/indices?v -u用户名:密码 health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open test1 xxx 1 1 100104 0 508mb 508mb index: 索引名称 docs.count: 索引中文档总数 store.size: 索引占用磁盘空间大小 pri.store.size: 主分片占用磁盘空间大小 使用awk命令获取索引名称并保存至unidom.txt文件中 curl -X GET http://ip:9200/_cat/indices?v -u用户名:密码 | grep -v "status" |awk '{print $3}' > unidom.txt 编写脚本文件进行多索引备份,详细脚本如下: #!/bin/bash for item in `cat /root/unidom.txt` do /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input http://icos:2y5CJH9S660ao70r3@10.20.0.8:9200/$item --output /export/unidom/analyzer/${item}_analyzer.json --type=analyzer /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input http://icos:2y5CJH9S660ao70r3@10.20.0.8:9200/$item --output /export/unidom/mapping/${item}_mapping.json --type=mapping /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input http://icos:2y5CJH9S660ao70r3@10.20.0.8:9200/$item --output /export/unidom/data/${item}_data.json --type=data done 执行上述脚本，并输出对应的脚本执行日志 nohup ./script.sh >>backup.log 2>&1 & #执行脚本script.sh时将错误输出2以及标准输出1都一起以附加写方式导入backup.log文件 当最终执行完脚本后查看日志中末尾是否有success字样，这样即可备份成功。 五、使用elasticdump进行数据恢复
1、检查新es集群中是否存在要导入的索引名称,如果不存在则先创建索引名称 curl -X PUT http://用户:密码@IP地址:9200/索引名 -u用户:密码 2、先导入分词 #!/bin/bash #ls /export/cityos-oss/analyzer |awk -F'_' '{print $1}' 命令主要是拿出备份文件以json结尾的文件名 for item in `ls /export/backup_es/analyzer |awk -F'_' '{print $1}'` do /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input /export/backup_es/analyzer/${item}_analyzer.json --output http://用户:密码@IP地址:9200/$item --type=analyzer done 执行上述脚本，并输出对应的脚本执行日志 nohup ./analyzer_in.sh >>/analyzer.log 2>&1 & #执行脚本script.sh时将错误输出2以及标准输出1都一起以附加写方式导入/analyzer.log文件 3、导入mapping结构 #!/bin/bash for item in `ls /export/backup_es/mapping |awk -F'_' '{print $1}'` do /export/server/elasticdump/elasticsearch-dump/bin/elasticdump --input /export/backup_es/mapping/${item}_mapping.json --output http://用户:密码@IP地址:9200/$item --type=mapping done 执行上述脚本，并输出对应的脚本执行日志 nohup ./mapping_in.sh >>mapping.log 2>&1 & #执行脚本script.sh时将错误输出2以及标准输出1都一起以附加写方式导入mapping.log文件 4、导入数据 #!/bin/bash for item in `ls /export/backup_es/data |awk -F'_' '{print $1}'` do /export/server/elasticdump/elasticsearch-dump/bin/elasticdump--input /export/backup_es/data/${item}_data.json --output http://用户:密码@IP地址:9200/$item --type=data done 执行上述脚本，并输出对应的脚本执行日志 nohup ./data_in.sh >>data.log 2>&1 & #执行脚本script.sh时将错误输出2以及标准输出1都一起以附加写方式导入data.log文件 5、导入完成后进行大小验证 curl -X GET http://ip:9200/_cat/indices?v -u用户名:密码 查看索引名称，索引中文档总数， 索引占用磁盘空间大小，主分片占用磁盘空间大小是否与源es集群查出来的索引大小一致。 