部署ELK8.0

本部署方案部署包
Kafka部署,在低于8.0版本时，kafka可以使用
ELK8.0版本
包
logstash-8.0.0-linux-x86_64.tar
kibana-8.0.0-linux-x86_64.tar
filebeat-8.0.0-linux-x86_64.tar
elasticsearch-8.0.0-linux-x86_64.tar
系统配置
systemctl stop firewalld
systemctl disable firewalld

setenforce  0 
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/sysconfig/selinux 
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config 
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/sysconfig/selinux 
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/selinux/config  

echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
echo "* soft nproc 65536"  >> /etc/security/limits.conf
echo "* hard nproc 65536"  >> /etc/security/limits.conf
echo "* soft  memlock  unlimited"  >> /etc/security/limits.conf
echo "* hard memlock  unlimited"  >> /etc/security/limits.conf

echo "vm.max_map_count = 655360" >> /etc/sysctl.conf
sysctl -p

1.安装elasticsearch
8.0版本后,默认增加安全配置，默认启动就行
创建用户
出于安全考虑，elasticsearch默认不允许以root账号运行。
groupadd es
useradd -g es es
echo "123456"|passwd --stdin es


tar -zxvf elasticsearch-8.0.0-linux-x86_64.tar.gz
mv elasticsearch-8.0.0 /usr/local/elasticsearch
cd /usr/local/elasticsearch/config/
cp elasticsearch.yml elasticsearch.yml.bak
vi elasticsearch.yml

cluster.name: "elasticsearch_petition"
node.name: node-01
transport.host: 0.0.0.0
transport.publish_host: 0.0