ElasticSearch安装及配置

1. 下载ElasticSearch

# https://www.elastic.co/downloads/elasticsearchwget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.6.0.tar.gz

2. 解压

tar -zxvf elasticsearch-5.6.0.tar.gz

3. 配置

elasticsearch默认的配置文件在conf/elasticsearch.yml下，默认全是注释掉的，可以根据需求进行修改，以下是我的配置文件

#... cluster名字，随意cluster.name: elk-application#... node名字，随意node.name: node-1#... es的数据存储目录path.data: /home/yangyue/ElasticSearch/es-data#... es的日志存储目录path.logs: /home/yangyue/ElasticSearch/es-logs#... 绑定的ip，我这里监听所有网卡的ipnetwork.host: 0.0.0.0#... http的端口号，es默认开启9300端口，9200是http端口http.port: 9200

4. 启动

#进入elasticsearch-5.6.0目录下bin/elasticsearch

通过上面的方式启动ES，可能会报以下错误：

[2017-09-14T23:07:52,748][INFO ][o.e.n.Node               ] [node-0] initialized[2017-09-14T23:07:52,749][INFO ][o.e.n.Node               ] [node-0] starting ...[2017-09-14T23:07:53,213][INFO ][o.e.t.TransportService   ] [node-0] publish_address {10.10.2.77:9300}, bound_addresses {[::]:9300}[2017-09-14T23:07:53,242][INFO ][o.e.b.BootstrapChecks    ] [node-0] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checksERROR: [1] bootstrap checks failed[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144][2017-09-14T23:07:53,261][INFO ][o.e.n.Node               ] [node-0] stopping ...[2017-09-14T23:07:53,352][INFO ][o.e.n.Node               ] [node-0] stopped[2017-09-14T23:07:53,352][INFO ][o.e.n.Node               ] [node-0] closing ...[2017-09-14T23:07:53,385][INFO ][o.e.n.Node               ] [node-0] closed

错误定位：

[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

这里需要修改两个配置文件：

/etc/security/limits.conf

# sudo vim /etc/security/limits.conf# 添加如下内容* soft nofile 65536* hard nofile 131072* soft nproc 2048* hard nproc 4096

/etc/sysctl.conf

# sudo vim /etc/sysctl.conf # 添加如下内容vm.max_map_count=655360

修改完文件后，执行：

sudo sysctl -p

然后就可以启动ElasticSearch了：

bin/elasticsearch 控制台启动bin/elasticsearch --daemonize 后台启动

5. 测试

访问：http://your_ip_addr:9200/ 如果看到下面这样的输出，表示成功

{  "name" : "node-1",  "cluster_name" : "elk-application",  "cluster_uuid" : "Q5mfvI_nTbmPj7IzHX82eA",  "version" : {    "number" : "5.6.0",    "build_hash" : "781a835",    "build_date" : "2017-09-07T03:09:58.087Z",    "build_snapshot" : false,    "lucene_version" : "6.6.0"  },  "tagline" : "You Know, for Search"}

如果出现启动不成功的情况，检查端口占用、jdk版本等。