elasticsearch

1顾画、安裝JDK
https://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html
2、下載安裝elasticsearch
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.6.3.zip
unzip elasticsearch-5.6.3.zip
mv elasticsearch-5.6.3 /usr/local/
3刺覆、配置
useradd elk
echo '123456' > passwd --stdin elk
chown -R elk. /usr/local/elasticsearch-5.6.3

echo '* soft nofile 65536' >> /etc/security/limits.conf
echo '* hard nofile 65536' >> /etc/security/limits.conf
echo '* soft noproc 65536' >> /etc/security/limits.conf
echo '* hard noproc 65536' >> /etc/security/limits.conf
echo "vm.max_map_count = 262144" >> /etc/sysctl.conf
echo "elk soft nproc 4096" >> /etc/security/limits.d/20-nproc.conf
sysctl -p

vi config/elasticsearch.yml
cluster.name: es_cluster #這里是你的el集群的名稱
node.name: node0 # elseach集群中的節(jié)點(diǎn)
path.data: /tmp/elasticseach/data #設(shè)置 data 目錄
path.logs: /tmp/elasticseach/logs #設(shè)置 logs 目錄
network.host:192.168.10.101 #這里配置本機(jī)的 ip 地址
http.port: 9200 #默認(rèn)的端口

4趾盐、啟動(dòng)
su - elk -c '/usr/local/elasticsearch-5.6.3/bin/elasticsearch -d'

FQA:

問題1：
修改log日志文件的所屬權(quán)
否則啟動(dòng)ES時(shí)會(huì)報(bào)錯(cuò)：
ERROR RollingFileManager (/myes/elasticsearch-6.0.0/logs/elasticsearch.log) java.io.FileNotFoundException: /elasticsearch-6.0.0/logs/elasticsearch.log (權(quán)限不夠) java.io.FileNotFoundException: /elasticsearch-6.0.0/logs/elasticsearch.log (權(quán)限不夠)
ERROR Could not create plugin of type class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateException: ManagerFactory [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory@????????] unable to create manager for [/myes/elasticsearch-6.0.0/logs/elasticsearch.log] with data ......
ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender
ERROR Null object returned for RollingFile in Appenders.
ERROR Unable to locate appender "rolling" for logger config "root"

問題2：
Java HotSpot(TM) 64-Bit Server VM warning: INFO: os::commit_memory(0x0000000085330000, 2060255232, 0) failed; error='Cannot allocate memory' (errno=12)
解決方法：
# 由于elasticsearch5.0默認(rèn)分配jvm空間大小為2g艰垂，修改jvm空間分配
# 如果使用虛擬機(jī)安裝畜埋，內(nèi)存最好不小于2G
vim config/jvm.options  
-Xms512m
-Xmx512m

問題3：
main ERROR Null object returned for RollingFile in Appenders.
main ERROR Unable to locate appender "rolling" for logger config "root"
main ERROR Unable to locate appender "index_indexing_slowlog_rolling" for logger config "index.indexing.slowlog.index"
main ERROR Unable to locate appender "index_search_slowlog_rolling" for logger config "index.search.slowlog"
main ERROR Unable to locate appender "deprecation_rolling" for logger config "org.elasticsearch.deprecation"
# 修改配置文件log4j2.properties
vim config/log4j2.properties
logger.deprecation.level = warn
修改為
logger.deprecation.level = error