Elasticsearch 启动失败错误收集

don’t run elasticsearch as root.

原因是不能用root用户启动，需要使用一个非root用户启动
https://blog.csdn.net/mengfei86/article/details/51210093

因环境问题启动失败

启动失败一

ERROR: [2] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

第一点问题解决方法：
使用命令临时解决：https://blog.csdn.net/yiifaa/article/details/70318154
永久解决：

#修改文件 /etc/security/limits.conf ，在下面添加下面两句内容
* hard nofile 65536
* soft nofile 65536

第二点问题解决方法：https://blog.csdn.net/jiankunking/article/details/65448030

启动失败二

[2018-04-08T15:02:48,967][INFO ][o.e.b.BootstrapChecks    ] [node-2] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
ERROR: [1] bootstrap checks failed
[1]: max file size [67108864] for user [elk] is too low, increase to [unlimited]

#切换root用户，执行下面命令
ulimit -f unlimited