Elasticsearch 启动报错处理

1.开启远程连接

#network.host: 192.168.0.1 
networ.host: 192.168.5.82 <--修改为本机iP，或者0.0.0.0

2.报错max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

需要修改/etc/security/limits.conf配置文件，添加如下内容：

# vim /etc/security/limits.conf 
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096

3.报错max number of threads [1024] for user [elsearch] is too low, increase to at least [2048]

修改/etc/security/limits.d/90-nproc.conf配置文件，修改内容如下： 

# vim /etc/security/limits.d/90-nproc.conf
* soft nproc 1024
#修改为
* soft nproc 2048

4.报错max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

修改配置文件/etc/sysctl.conf，修改内容如下：

# vim /etc/sysctl.conf
添加下面配置：
vm.max_map_count = 655360

5.报错system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk原因：

这是在因为操作系统不支持SecComp，而ES5.4.1默认bootstrap.system_call_filter为true进行检测，所以导致检测失败，失败后直接导致ES不能启动。
解决：

在elasticsearch.yml中配置bootstrap.system_call_filter为false，注意要在Memory下面:

bootstrap.memory_lock: false
bootstrap.system_call_filter: false

重启之后即可正常使用