环境
系统版本:CentOS Linux release 7.4.1708 (Core) 。1C2G 存储:20GB
二进制安装
1、地址:https://www.elastic.co/cn/downloads/elasticsearch
2022-08-26蓝框中对应的下载地址:
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.4.0-linux-x86_64.tar.gz
2、解压
tar zvxf elasticsearch-8.4.0-linux-x86_64.tar.gz -C /opt/
cd /opt/
ln -sv elasticsearch-8.4.0 elasticsearch
‘elasticsearch’ -> ‘elasticsearch-8.4.0’
3、创建用户并赋权
不能以root权限启动elasticsearch,否则会报错。
useradd es
chown -R es:es /opt/elasticsearch*
[root@xxx elasticsearch]# ll -d /opt/elasticsearch*
lrwxrwxrwx 1 es es 19 Aug 26 15:17 /opt/elasticsearch -> elasticsearch-8.4.0
drwxr-xr-x 9 es es 4096 Aug 20 03:30 /opt/elasticsearch-8.4.0
4、调整系统参数
调整进程最大打开文件数数量
[root@xxx elasticsearch]# cat >> /etc/security/limits.conf << EOF
> * hard nofile 65535
> * soft nofile 65535
> EOF
调整进程最大虚拟内存区域数量
#临时设置
sysctl -w vm.max_map_count=262144
#永久设置
echo "vm.max_map_count=262144" /etc/sysctl.conf
sysctl -p
如果不调整会遇到的问题参考:
https://blog.csdn.net/m0_67401417/article/details/123974262
5、配置为系统服务管理(systemctl)
cat > elasticsearch.service <<EOF
[Unit]
Description=Elasticsearch
Wants=network-online.target
After=network-online.target
[Service]
User=es
Group=es
ExecStart=/opt/elasticsearch/bin/elasticsearch
ExecReload=/bin/kill -HUP \$MAINPID
LimitNOFILE=65535
KillMode=process
Restart=on-failure
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
启动
systemctl start elasticsearch
查看状态
systemctl status elasticsearch
‘’’
Active: active (running) since Fri 2022-08-26 16:55:52 CST; 5s ago
‘’’
6、修改配置文件
pwd: /opt/elasticsearch/config
#修改前备份:cp elasticsearch.yml elasticsearch.yml.20220826
vi elasticsearch.yml
cluster.name: elastic #集群名称
node.name: elk-1 #集群节点名称
path.data: /opt/elasticsearch #数据目录
path.logs: /opt/elasticsearch/logs #日志目录
network.host: 0.0.0.0 #监听地址
http.port: 9200 #监听端口
transport.tcp.port: 9300 #内部节点之间通信端口
discovery.seed_hosts: ["192.168.56.15"] #集群节点列表
cluster.initial_master_nodes: ["192.168.56.15"] #首次启动指定的master节点,只需在一个节点指定,其他节点不启动该参数
7、重启
systemctl restart elasticsearch
#开机自启
systemctl enable elasticsearch