elasticsearch安装

安装启动：

• 进入focuson1的/usr/local/src/elasticsearch
• 上传压缩包elasticsearch-6.2.4.zip并解压
• 安装ik中文分词器插件（分词器插件和elasticsearch有对应版本，如果没有按照对应版本，会报错，具体对应版本见GitHub）

./bin/elasticsearch-plugin install https://github.com/medcl/elasticsearch-analysis-ik/releases/download/v6.2.4/elasticsearch-analysis-ik-6.2.4.zip

• 启动：./bin/elasticsearch

出现错误：不能使用root用户启动
创建普通用户，并给普通用户赋权：chown lixinhong:lixinhong -R /usr/local/src/elasticsearch
切换到普通用户：su - lixinhong

• 再次启动：./bin/elasticsearch

可以正常启动但是会抛出下面错误：
ERROR: [4] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max number of threads [1024] for user [lixinhong] is too low, increase to at least [4096]
[3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[4]: system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk
解决如下：
处理一：
vi /etc/security/limits.conf
* soft nofile 65536
* hard nofile 131072
* soft nproc 4096
* hard nproc 5000
处理二：
vi /etc/sysctl.conf
     vm.max_map_count=655360
sysctl -p
处理三：
vi /etc/security/limits.d/90-nproc.conf
*          soft    nproc     4096
处理四：
问题4网上搜到的原因是：因为Centos6不支持SecComp，而ES5.2.1默认bootstrap.system_call_filter为true进行检测，所以导致检测失败，失败后直接导致ES不能启动。详见 ：https://github.com/elastic/elasticsearch/issues/22899，解决方案如下：
vi config/elasticsearch.yml
    bootstrap.memory_lock: false

    bootstrap.system_call_filter: false

• 再次启动，此时成功！下面是警告不必理会，是由于Linux版本太低

[2018-06-03T02:27:09,123][WARN ][o.e.b.JNANatives         ] unable to install syscall filter:
java.lang.UnsupportedOperationException: seccomp unavailable: requires kernel 3.5+ with CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER compiled in
    at org.elasticsearch.bootstrap.SystemCallFilter.linuxImpl(SystemCallFilter.java:328) ~[elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.SystemCallFilter.init(SystemCallFilter.java:616) ~[elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.JNANatives.tryInstallSystemCallFilter(JNANatives.java:258) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Natives.tryInstallSystemCallFilter(Natives.java:113) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:110) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:323) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) [elasticsearch-cli-6.2.4.jar:6.2.4]
    at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-6.2.4.jar:6.2.4]
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85) [elasticsearch-6.2.4.jar:6.2.4]

• 测试一下，正常返回数据：

[root@focuson1 ~]# curl localhost:9200
{
  "name" : "ATUn2z7",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "NFohyFIASSmBfn8FAsLa6g",
  "version" : {
    "number" : "6.2.4",
    "build_hash" : "ccec39f",
    "build_date" : "2018-04-12T20:37:28.497551Z",
    "build_snapshot" : false,
    "lucene_version" : "7.2.1",
    "minimum_wire_compatibility_version" : "5.6.0",
    "minimum_index_compatibility_version" : "5.0.0"
  },
  "tagline" : "You Know, for Search"
}

• 但是此时只能在本机访问，有ip白名单设置，不能再本机以外的机器访问；

此时，修改配置：vi config/elasticsearch.yml network.host=0.0.0.0

• 然后重新启动，此次使用守护进程启动，加上参数-d

./bin/elasticsearch -d
此时启动完成！