ELK 实验（二）安装Elastic Search 单节点

Linux 安装

java -version

echo $JAVA_HOME

木有返回，环境没有设置好。。。

vi /etc/profile

export JAVA_HOME=/usr/java/jdk1.8.0_162

export JRE_HOME=$JAVA_HOME/jre

export CLASSPATH=$JAVA_HOME/lib:$JRE_HOME/lib:$CLASSPATH

export PATH=$JAVA_HOME/bin:$JRE_HOME/bin:$PATH

刷新下

source /etc/profile

有了

下载

curl -L -O https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.2.3.tar.gz

tar -zxvf elasticsearch-6.2.3.tar.gz

cd elasticsearch-6.2.3/bin

./elasticsearch

容我修个错误

org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root

这个错误，是因为使用root用户启动elasticsearch，elasticsearch是不允许使用root用户启动的，所以我们需要添加用户，或者加一个参数。

cp -r elasticsearch-6.2.3 /usr/

su pactera

./elasticsearch

Exception in thread "main" java.nio.file.AccessDeniedException: /usr/elasticsearch-6.2.3/config/jvm.options

容我再修个错误

感觉目录没权限，加一个

chown pactera /usr/elasticsearch-6.2.3/ -R

chown -R 文件夹名 用户名

内存设置小了，不过可以忽略

ES5之前可以用这个，6就不行了

vi bin/elasticsearch

ES_JAVA_OPTS="-Des.insecure.allow.root=true"

或者启动加参数

./elasticsearch -Des.insecure.allow.root=true

以后台服务运行

./elasticsearch -d

curl -i localhost:9200

本地访问有数据，但是远程访问无法，容我修个错误

vi config/elasticsearch.yml

network.host: 0.0.0.0

改成IP后无法公开ip

bound or publishing to a non-loopback address, enforcing bootstrap checks

ERROR: [2] bootstrap checks failed

又出现3个错误，继续踩坑

ERROR: [3] bootstrap checks failed

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

[2]: memory locking requested for elasticsearch process but memory is not locked

[3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

错误2

vi elasticsearch.yml

加入2行

bootstrap.memory_lock: false

bootstrap.system_call_filter: false

错误3

max virtual memory增加10倍总归没错了吧

临时增加

sysctl -w vm.max_map_count=655360

sysctl -a | grep "vm.max_map_count"

或者永久解决

vi /etc/sysctl.conf

vm.max_map_count=655360

sysctl -p

剩下错误1，最大文件描述

[2018-04-16T10:43:04,079][INFO ][o.e.b.BootstrapChecks ] [node-1] bound or publishing to a non-loopback address, enforcing bootstrap checks

ERROR: [1] bootstrap checks failed

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

vi /etc/security/limits.conf

* soft nofile 65536

* hard nofile 131072

* soft nproc 2048

* hard nproc 4096

然后需要重启下

192.168.209.160:9200 可以从外网访问了

https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.2.3.msi

这组件十分的傻瓜。。。。