ElasticSearch安装及配置

1. 下载ElasticSearch

# https://www.elastic.co/downloads/elasticsearch
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.6.0.tar.gz

2. 解压

tar -zxvf elasticsearch-5.6.0.tar.gz

3. 配置

elasticsearch默认的配置文件在conf/elasticsearch.yml下，默认全是注释掉的，可以根据需求进行修改，以下是我的配置文件

#... cluster名字，随意
cluster.name: elk-application
#... node名字，随意
node.name: node-1
#... es的数据存储目录
path.data: /home/yangyue/ElasticSearch/es-data
#... es的日志存储目录
path.logs: /home/yangyue/ElasticSearch/es-logs
#... 绑定的ip，我这里监听所有网卡的ip
network.host: 0.0.0.0
#... http的端口号，es默认开启9300端口，9200是http端口
http.port: 9200

4. 启动

#进入elasticsearch-5.6.0目录下
bin/elasticsearch

通过上面的方式启动ES，可能会报以下错误：

[2017-09-14T23:07:52,748][INFO ][o.e.n.Node               ] [node-0] initialized
[2017-09-14T23:07:52,749][INFO ][o.e.n.Node               ] [node-0] starting ...
[2017-09-14T23:07:53,213][INFO ][o.e.t.TransportService   ] [node-0] publish_address {10.10.2.77:9300}, bound_addresses {[::]:9300}
[2017-09-14T23:07:53,242][INFO ][o.e.b.BootstrapChecks    ] [node-0] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
ERROR: [1] bootstrap checks failed
[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2017-09-14T23:07:53,261][INFO ][o.e.n.Node               ] [node-0] stopping ...
[2017-09-14T23:07:53,352][INFO ][o.e.n.Node               ] [node-0] stopped
[2017-09-14T23:07:53,352][INFO ][o.e.n.Node               ] [node-0] closing ...
[2017-09-14T23:07:53,385][INFO ][o.e.n.Node               ] [node-0] closed

错误定位：

[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

这里需要修改两个配置文件：

/etc/security/limits.conf

# sudo vim /etc/security/limits.conf
# 添加如下内容

* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096

/etc/sysctl.conf

# sudo vim /etc/sysctl.conf 
# 添加如下内容

vm.max_map_count=655360

修改完文件后，执行：

sudo sysctl -p

然后就可以启动ElasticSearch了：

bin/elasticsearch 控制台启动
bin/elasticsearch --daemonize 后台启动

5. 测试

访问：http://your_ip_addr:9200/ 如果看到下面这样的输出，表示成功

{
  "name" : "node-1",
  "cluster_name" : "elk-application",
  "cluster_uuid" : "Q5mfvI_nTbmPj7IzHX82eA",
  "version" : {
    "number" : "5.6.0",
    "build_hash" : "781a835",
    "build_date" : "2017-09-07T03:09:58.087Z",
    "build_snapshot" : false,
    "lucene_version" : "6.6.0"
  },
  "tagline" : "You Know, for Search"
}

如果出现启动不成功的情况，检查端口占用、jdk版本等。