ELK 實驗（二）安裝Elastic Search 單節點

Linux 安裝

java -version

echo $JAVA_HOME

木有返回，環境沒有設置好。。。

vi /etc/profile

export JAVA_HOME=/usr/java/jdk1.8.0_162

export JRE_HOME=$JAVA_HOME/jre

export CLASSPATH=$JAVA_HOME/lib:$JRE_HOME/lib:$CLASSPATH

export PATH=$JAVA_HOME/bin:$JRE_HOME/bin:$PATH

刷新下

source /etc/profile

有了

下載

curl -L -O https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.2.3.tar.gz

tar -zxvf elasticsearch-6.2.3.tar.gz

cd elasticsearch-6.2.3/bin

./elasticsearch

容我修個錯誤

org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root

這個錯誤，是因為使用root用戶啟動elasticsearch，elasticsearch是不允許使用root用戶啟動的，所以我們需要添加用戶，或者加一個參數。

cp -r elasticsearch-6.2.3 /usr/

su pactera

./elasticsearch

Exception in thread "main" java.nio.file.AccessDeniedException: /usr/elasticsearch-6.2.3/config/jvm.options

容我再修個錯誤

感覺目錄沒權限，加一個

chown pactera /usr/elasticsearch-6.2.3/ -R

chown -R 文件夾名 用戶名

內存設置小了，不過可以忽略

ES5之前可以用這個，6就不行了

vi bin/elasticsearch

ES_JAVA_OPTS="-Des.insecure.allow.root=true"

或者啟動加參數

./elasticsearch -Des.insecure.allow.root=true

以后臺服務運行

./elasticsearch -d

curl -i localhost:9200

本地訪問有數據，但是遠程訪問無法，容我修個錯誤

vi config/elasticsearch.yml

network.host: 0.0.0.0

改成IP后無法公開ip

bound or publishing to a non-loopback address, enforcing bootstrap checks

ERROR: [2] bootstrap checks failed

又出現3個錯誤，繼續踩坑

ERROR: [3] bootstrap checks failed

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

[2]: memory locking requested for elasticsearch process but memory is not locked

[3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

錯誤2

vi elasticsearch.yml

加入2行

bootstrap.memory_lock: false

bootstrap.system_call_filter: false

錯誤3

max virtual memory增加10倍總歸沒錯了吧

臨時增加

sysctl -w vm.max_map_count=655360

sysctl -a | grep "vm.max_map_count"

或者永久解決

vi /etc/sysctl.conf

vm.max_map_count=655360

sysctl -p

剩下錯誤1，最大文件描述

[2018-04-16T10:43:04,079][INFO ][o.e.b.BootstrapChecks ] [node-1] bound or publishing to a non-loopback address, enforcing bootstrap checks

ERROR: [1] bootstrap checks failed

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

vi /etc/security/limits.conf

* soft nofile 65536

* hard nofile 131072

* soft nproc 2048

* hard nproc 4096

然后需要重啟下

192.168.209.160:9200 可以從外網訪問了

https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.2.3.msi

這組件十分的傻瓜。。。。