【已解决】Logstash连接不上Elasticsearch的问题（docker环境）

一、环境描述

ELK 通过 Docker 一键部署，主要配置信息如下：

# elasticsearch.yml
cluster.name: "docker-cluster"
network.host: 0.0.0.0
xpack.security.enabled: true

# config/logstash.yml
http.host: "0.0.0.0"
xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.username: "logstash_system"
xpack.monitoring.elasticsearch.password: "123.com"
xpack.monitoring.elasticsearch.hosts: [ "http://192.168.22.200:9200" ]

# pipeline/logstash.conf
input {
  beats {
    host => "0.0.0.0"
    port => 5044
  }
}

output {
  if [type] == "ceshi1" {
    elasticsearch {
      action => "index"
      hosts => ["http://192.168.22.200:9200"]
      user => "elastic"
      password => "WA@ELK888"
      index => "ceshi1-%{+YYYY.MM.dd}"
    }
  }
}

二、问题

三、解决

找了大量文章，均无效。最后，参考了这篇文章后完美解决
主要原因就是 jvm 大小配置不够。

docker exec -it es bash
vi config/jvm.options

# 在任意一处位置添加，增添堆栈大小
-Xms4g
-Xmx4g
-Xss10m

最后重启 ELK 即可完美解决问题。