Elasticsearch服务部署-基于rpm包部署

1.ElasticSearch的rpm单点部署
    1.1 下载Elasticsearch
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.5-x86_64.rpm

    1.2 使用rpm包安装
rpm -ivh elasticsearch-7.17.5-x86_64.rpm

    1.4 修改配置文件
vim /etc/elasticsearch/elasticsearch.yml 
...
# 指定数据目录
path.data: /var/lib/elasticsearch
# 指定日志目录
path.logs: /var/log/elasticsearch
# 指定服务监听的IP地址，如果设置为"0.0.0.0"表示监听的所有网卡。
network.host: 0.0.0.0
# network.host: 10.0.0.91
# 指定当前集群的服务发现节点，如果是单点的话，只需要指定本机的IP地址即可。
discovery.seed_hosts: ["10.0.0.91"]

    1.5 启动elasticsearch服务
systemctl enable --now elasticsearch

    1.6 访问elasticsearch的WebUI
curl http://10.0.0.91:9200/

2.ElasticSearch的rpm集群部署
    2.0 如果复用单点的环境，则需要先停止服务并清空数据
[root@elk91 ~]# systemctl stop elasticsearch
[root@elk91 ~]# rm -rf /var/{lib,log}/elasticsearch/* /tmp/*

    2.1 下载Elasticsearch
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.5-x86_64.rpm

    2.2 所有节点配置主机解析
cat >> /etc/hosts <<EOF
10.0.0.91 elk91
10.0.0.92 elk92
10.0.0.93 elk93
EOF

    2.3  安装elasticsearch
rpm -ivh elasticsearch-7.17.5-x86_64.rpm

    2.4 修改配置文件
vim /etc/elasticsearch/elasticsearch.yml 
...
cluster.name: es
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host:  0.0.0.0
discovery.seed_hosts: ["elk91","elk92","elk93"]
# 指定ES集群初始化master选举的初始节点。
cluster.initial_master_nodes: ["elk91","elk92","elk93"]
...

scp /etc/elasticsearch/elasticsearch.yml elk92:/etc/elasticsearch/elasticsearch.yml
scp /etc/elasticsearch/elasticsearch.yml elk93:/etc/elasticsearch/elasticsearch.yml

    2.5 启动集群
# systemctl stop elasticsearch
systemctl enable --now elasticsearch
# systemctl restart elasticsearch

    2.6 检查集群状态
# curl 10.0.0.91:9200/_cat/nodes
10.0.0.92 13 91 8 0.09 0.20 0.15 cdfhilmrstw - elk92
10.0.0.91 13 96 9 0.11 0.23 0.18 cdfhilmrstw * elk91
10.0.0.93 14 71 7 0.21 0.25 0.13 cdfhilmrstw - elk93

    
温馨提示:
    如果你的集群不正常工作，执行如下操作
        (1)集群所有节点停止服务
systemctl stop elasticsearch
pkill java

        (2)确保停止服务完成，可以执行"ss -ntl"查看监听端口是否存在或者是查看java
ss -ntl
ps -ef | grep java

        (3)删除集群默认的数据
rm -rf /var/lib/elasticsearch/* /var/log/elasticsearch/* /tmp/*

        (4)重新启动集群即可
systemctl restart elasticsearch