linux安装ES

下载安装包，并解压

1. kibana

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/kibana/kibana-7.8.0-linux-x86_64.tar.gz
   tar -zxvf kibana-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/kibana/kibana-7.13.1-linux-x86_64.tar.gz
   

2. elasticsearch

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.8.0-linux-x86_64.tar.gz
   tar -zxvf elasticsearch-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.13.1-linux-x86_64.tar.gz
   

3. filebeat

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.8.0-linux-x86_64.tar.gz
   tar -zxvf filebeat-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.13.1-linux-x86_64.tar.gz
   

4. packetbeat

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.8.0-linux-x86_64.tar.gz
   tar -zxvf packetbeat-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.13.1-linux-x86_64.tar.gz
   

5. metricbeat

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-7.8.0-linux-x86_64.tar.gz
   tar -zxvf metricbeat-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-7.13.1-linux-x86_64.tar.gz
   

6. logstash

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/logstash/logstash-7.8.0.tar.gz
   tar -zxvf logstash-7.8.0.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/logstash/logstash-7.13.1-linux-x86_64.tar.gz
   

7. heartbeat

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/beats/heartbeat/heartbeat-7.8.0-linux-x86_64.tar.gz
   tar -zxvf heartbeat-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/beats/heartbeat/heartbeat-7.13.1-linux-x86_64.tar.gz
   

8. apm-server

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/apm-server/apm-server-7.8.0-linux-x86_64.tar.gz
   tar -zxvf apm-server-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/apm-server/apm-server-7.13.1-linux-x86_64.tar.gz
   

9. functionbeat

   # 7.8.0 版本
   wget https://artifacts.elastic.co/downloads/beats/functionbeat/functionbeat-7.8.0-linux-x86_64.tar.gz
   tar -zxvf functionbeat-7.8.0-linux-x86_64.tar.gz
   # 7.13.1 版本
   wget https://artifacts.elastic.co/downloads/beats/functionbeat/functionbeat-7.13.1-linux-x86_64.tar.gz
   

10. …

切换用户

启动 elasticsearch和 kibana不能使用root账号【在elasticsearch-7.8.0同级目录】

useradd elk
chown -R  elk:elk *
# 切换到elk用户下
su elk

启动 elasticsearch

1. 配置对外IP

   vim ./elasticsearch-7.8.0/config/elasticsearch.yml
   
   # 编辑以下信息【0.0.0.0】，兼容内外网
   network.host: 0.0.0.0
   # 集群的话，可配置多个节点
   discovery.seed_hosts: ["120.0.0.1:9300"]
   cluster.initial_master_nodes: ["127.0.0.1:9300"]
   

2. 后台启动

   启动 elasticsearch 不能使用root账号【在 elasticsearch-7.8.0 同级目录】,默认启动ip端口【0.0.0.0:9200】、【0.0.0.0:9300】

   ./elasticsearch-7.8.0/bin/elasticsearch &
   

3. 启动报错解决办法

   ERROR: [1] bootstrap checks failed [1]: max virtual memory areas vm.max_map_count [65530] is too low

   # 切换到 root，修改配置 sysctl.conf
   vim /etc/sysctl.conf
   
   # 编辑如下信息
   vm.max_map_count=655360
   
   # 保存退出，执行以下命令
   sysctl -p
   
   

4. …

启动 kibana

1. 配置对外IP

   vim ./kibana-7.8.0-linux-x86_64/config/kibana.yml
   
   # 编辑以下信息
   server.host: "0.0.0.0"
   elasticsearch.hosts: ["http://localhost:9200"]
   

2. 后台启动

   启动 kibana 不能使用root账号【在 kibana-7.8.0 同级目录】,默认ip端口【0 0.0.0.0:5601】

   ./kibana-7.8.0-linux-x86_64/bin/kibana &
   

3. 注意需要使用谷歌或火狐浏览器访问，不然会一直loading到让你怀疑人生…