環(huán)境說(shuō)明
- linux：centos7
- elasticsearch：5.6.4
- elasticsearch-head：5
目錄結(jié)構(gòu)
elasticsearch/
├── docker-compose.yml
├── head
└── node
├── es1
│ ├── data
│ └── elasticsearch.yml
└── es2
├── data
└── elasticsearch.yml
主節(jié)點(diǎn)elasticsearch.yml配置文件
elasticsearch/node/es1/elasticsearch.yml
network.bind_host: 0.0.0.0
cluster.name: elasticsearch_cluster
cluster.routing.allocation.disk.threshold_enabled: false
node.name: master
node.master: true
node.data: true
http.cors.enabled: true
http.cors.allow-origin: "*"
network.host: 0.0.0.0
discovery.zen.minimum_master_nodes: 1
從節(jié)點(diǎn)elasticsearch.yml配置文件
elasticsearch/node/es2/elasticsearch.yml
network.bind_host: 0.0.0.0
cluster.name: elasticsearch_cluster
cluster.routing.allocation.disk.threshold_enabled: false
node.name: node2
node.master: false
node.data: true
http.cors.enabled: true
http.cors.allow-origin: "*"
network.host: 0.0.0.0
discovery.zen.minimum_master_nodes: 1
discovery.zen.ping.unicast.hosts: es1
docker-compose.yml配置文件
version: '2.0'
services:
elasticsearch-central:
image: elasticsearch:5.6.4
container_name: es1
volumes:
- /opt/modules/elasticsearch/node/es1/data:/usr/share/elasticsearch/data
- /opt/modules/elasticsearch/node/es1/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
environment:
- "ES_JAVA_OPTS=-Xms512m -Xmx512m"
- ES_CLUSTERNAME=elasticsearch
command: elasticsearch
ports:
- "9200:9200"
- "9300:9300"
elasticsearch-data:
image: elasticsearch:5.6.4
container_name: es2
volumes:
- /opt/modules/elasticsearch/node/es2/data:/usr/share/elasticsearch/data
- /opt/modules/elasticsearch/node/es2/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
environment:
- bootstrap.memory_lock=true
- "ES_JAVA_OPTS=-Xms512m -Xmx512m"
- ES_CLUSTERNAME=elasticsearch
command: elasticsearch
ports:
- "9201:9200"
- "9301:9300"
links:
- elasticsearch-central:elasticsearch
elasticsearch-head:
image: mobz/elasticsearch-head:5
container_name: head
volumes:
- /opt/modules/elasticsearch/head/Gruntfile.js:/usr/src/app/Gruntfile.js
- /opt/modules/elasticsearch/head/_site/app.js:/usr/src/app/_site/app.js
ports:
- "9100:9100"
links:
- elasticsearch-central:elasticsearch
配置head
- 下載elasticsearch-head
cd elasticsearch
git clone git://github.com/mobz/elasticsearch-head.git
mv elasticsearch-head head
下載下來(lái)的代碼結(jié)構(gòu)如下：
elasticsearch-head目錄
-
elasticsearch\head\Gruntfile.js修改以下片段
connect: {
server: {
options: {
/* 默認(rèn)監(jiān)控：127.0.0.1,修改為：0.0.0.0 */
hostname: '0.0.0.0',
port: 9100,
base: '.',
keepalive: true
}
}
}
-
elasticsearch\head\_site\app.js修改以下代碼片段
* 修改localhost為elasticsearch集群地址凳厢，Docker部署中，一般是elasticsearch宿主機(jī)地址 */
this.base_uri = this.config.base_uri || this.prefs.get("app-base_uri") || "http://localhost:9200";
啟動(dòng)
- 運(yùn)行elasticsearch需要vm.max_map_count至少需要262144內(nèi)存
切換到root用戶(hù)修改配置sysctl.conf
vi /etc/sysctl.conf
在尾行添加以下內(nèi)容
vm.max_map_count=262144
并執(zhí)行命令
sysctl -p
elk啟動(dòng)的時(shí)候可能會(huì)提示如下錯(cuò)誤:
max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
- 啟動(dòng)es
docker-compose up 啟動(dòng)
docker-compose down 關(guān)閉
測(cè)試
elasticsearch-head可視化頁(yè)面：http://es所在機(jī)器IP:9100
elasticsearch-head可視化頁(yè)面
參考鏈接：
http://www.reibang.com/p/a26c8c7226d7
https://blog.csdn.net/sinat_31908303/article/details/80496349
https://blog.csdn.net/ggwxk1990/article/details/78698648
