es集群扩容示例

es集群扩容操作相对比较简单，大概步骤记录如下：

1、添加elasticsearch用户

adduser elasticsearch

2、设置JAVA_HOME环境变量

export JAVA_HOME=/usr/jdk1.8.0_101 export PATH=$JAVA_HOME/bin:$PATH

3、调整elasticsearch用户limit参数

更改/etc/security/limits.conf文件

elasticsearch soft memlock unlimited elasticsearch hard memlock unlimited elasticsearch  soft  nofile   65536 elasticsearch  hard  nofile   131072 elasticsearch  soft  nproc    4096 elasticsearch  hard  nproc    4096

es6版本soft nproc最小为4096，es5版本最小为2048，否则启动会报错。

4、调整sysctl参数

更改/etc/sysctl.conf文件

net.ipv4.tcp_mem = 3007008 4009344 6014016 net.ipv4.tcp_wmem = 4096 87380 4194304 net.ipv4.tcp_rmem = 4096 87380 4194304 net.ipv4.udp_mem = 3007008 4009344 6014016 vm.max_map_count = 425530 vm.swappiness = 1

sysctl -p

5、下载对应版本的elasticsearch-6.1.1.tar.gz，解压后修改配置文件(以下都在elasticsearch用户下操作)

jvm.options文件修改

-Xms30g -Xmx30g

elasticsearch.yml文件

cluster.name: elk node.name: "b28-es-241" bootstrap.memory_lock: true bootstrap.system_call_filter: false network.host: 0.0.0.0 network.publish_host: 0.0.0.0 transport.publish_host: 172.29.1.241 transport.tcp.port: 9301 discovery.zen.ping.unicast.hosts: ["172.29.8.53:9300","172.29.8.37:9300","172.29.8.38:9300","172.29.8.39:9300","172.29.8.38:9301","172.29.8.39:9301"] node.attr.box_type: hot discovery.zen.fd.ping_timeout: 120s discovery.zen.fd.ping_retries: 6 discovery.zen.fd.ping_interval: 30s path.data: /ssd/data node.data: true node.master: False http.cors.enabled: true http.cors.allow-origin: "*" action.auto_create_index: .security,.monitoring*,.watches,.triggered_watches,.watcher-history*,* searchguard.ssl.transport.keystore_filepath: node-32-keystore.jks searchguard.ssl.transport.keystore_password: xxx searchguard.ssl.transport.truststore_filepath: truststore.jks searchguard.ssl.transport.truststore_password: yyy searchguard.ssl.transport.enforce_hostname_verification: false searchguard.authcz.admin_dn:   - "CN=admin,OU=SSL,O=elk,L=elk,C=cn" #path.repo: ["/home/data"] #path.repo: ["/mnt/esbackup"] thread_pool.bulk.queue_size: 1000

其中node.name、transport.publish_host、transport.tcp.port、node.attr.box_type、path.data、searchguard.ssl.transport.keystore_filepath、password等修改为实际值。

证书jks文件放到config目录下，确保path.data的有elasticsearch用户的权限。

6、安装对应版本search-guard插件

./elasticsearch-plugin  install -b com.floragunn:search-guard-6:6.1.1-20.1

7、启动elasticsearch

./elasticsearch -d