ES搭建篇01-es单机环境搭建

从今天开始，开始学习ELK~~

进入官网，下载es：

https://www.elastic.co/cn/downloads/elasticsearch

解压：

mkdir /opt/bigdata/es
tar -xvf elasticsearch-7.6.2-linux-x86_64.tar.gz -C /opt/bigdata/es

移动到es目录中，移动到config目录下

编辑elasticsearch.yml文件：

vi elasticsearch.yml

修改内容：

network.host: 0.0.0.0 #绑定端口为0.0.0.0，使得任意ip都可以访问

编辑jvm.options文件

启动

[root@dream01 bin]# ./elasticsearch
[2020-05-07T23:57:02,792][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [unknown] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:163) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:150) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) ~[elasticsearch-cli-6.8.3.jar:6.8.3]
        at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-6.8.3.jar:6.8.3]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:116) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93) ~[elasticsearch-6.8.3.jar:6.8.3]
Caused by: java.lang.RuntimeException: can not run elasticsearch as root
        at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:103) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:170) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) ~[elasticsearch-6.8.3.jar:6.8.3]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:159) ~[elasticsearch-6.8.3.jar:6.8.3]
        ... 6 more

es默认不能使用root用户启动，因此需要新增一个额外的用户elsearch进行启动：

useradd elsearch

es文件夹赋予该elsearch用户操作权限

 chown elsearch:elsearch es/ -R

切换用户

su elsearch

错误1：

添加如下内容:

* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096

错误2：

[2]: max number of threads [1024] for user [elsearch] is too low, increase to at least
[4096]

解决：切换到root用户，进入limits.d目录下修改配置文件。

vi /etc/security/limits.d/90-nproc.conf

#修改如下内容：
* soft nproc 1024
#修改为
* soft nproc 4096

错误3：

[3]: system call filters failed to install; check the logs and fix your configuration
or disable system call filters at your own risk

解决：Centos6不支持SecComp，而ES5.2.0默认bootstrap.system_call_filter为true

vim config/elasticsearch.yml

添加：

bootstrap.system_call_filter: false