centos7-elk之elasticsearch

准备环境：centos7.4

jdk：1.8

安装jdk可见链接：https://blog.csdn.net/xuejinyan123/article/details/102685458

下载 ：elasticsearch 版本：6.0.1

存放路径：/opt/elk/elasticsearch-6.0.1

解压：tar -zxvf elasticsearch-6.0.1

elasticsearch配置：

#创建elk用户

adduser  -s /bin/bash -c 'elk' -m -d /home/elk elk

注：从2.0开始不能用root用户启动需要elk用户启动

修改配置文件：

vi elasticsearch.yml

path.data: /opt/elk/elasticsearch-6.0.1/data

path.logs: /opt/elk/elasticsearch-6.0.1/logs

network.host: 0.0.0.0

http.port: 9200

注释：

path.data:                          ----》存放数据路径

path.logs:                      -----》日志路径

network.host:                  -----》根据自己的ip修改

http.port:                       

#创建data,logs

[root@elk config]#mkdir /opt/elk/elasticsearch-6.0.1/data

[root@elk config]#mkdir /opt/elk/elasticsearch-6.0.1/logs

启动elasticsearch：

#修改elasticsearch权限

[root@elk ~]#chown -R elk.elk /opt/elk/elasticsearch-6.0.1

[root@elk ~]# su – elk

#在前台显示下效果

[elk@elk ~]$/opt/elk/elasticsearch-6.0.1/bin/elasticsearch

 如果执行完这个脚本，中途没有退出，说明启动成功

[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [analysis-common]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [ingest-common]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [lang-expression]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [lang-mustache]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [lang-painless]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [parent-join]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [percolator]
[2019-10-23T15:03:34,217][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [reindex]
[2019-10-23T15:03:34,218][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [repository-url]
[2019-10-23T15:03:34,218][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [transport-netty4]
[2019-10-23T15:03:34,218][INFO ][o.e.p.PluginsService     ] [gtEEjvR] loaded module [tribe]
[2019-10-23T15:03:34,219][INFO ][o.e.p.PluginsService     ] [gtEEjvR] no plugins loaded
[2019-10-23T15:03:38,795][INFO ][o.e.d.DiscoveryModule    ] [gtEEjvR] using discovery type [zen]
[2019-10-23T15:03:40,590][INFO ][o.e.n.Node               ] initialized
[2019-10-23T15:03:40,590][INFO ][o.e.n.Node               ] [gtEEjvR] starting ...
[2019-10-23T15:03:41,283][INFO ][o.e.t.TransportService   ] [gtEEjvR] publish_address {192.168.16.18:9300}, bound_addresses {[::]:9300}
[2019-10-23T15:03:41,342][INFO ][o.e.b.BootstrapChecks    ] [gtEEjvR] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
[2019-10-23T15:03:44,482][INFO ][o.e.c.s.MasterService    ] [gtEEjvR] zen-disco-elected-as-master ([0] nodes joined), reason: new_master {gtEEjvR}{gtEEjvRHQeqThfv0DvKbmw}{-5dj5qCQSAGMeLZUMnorCA}{192.168.16.18}{172.20.10.9:9300}
[2019-10-23T15:03:44,491][INFO ][o.e.c.s.ClusterApplierService] [gtEEjvR] new_master {gtEEjvR}{gtEEjvRHQeqThfv0DvKbmw}{-5dj5qCQSAGMeLZUMnorCA}{172.20.10.9}{172.20.10.9:9300}, reason: apply cluster state (from master [master {gtEEjvR}{gtEEjvRHQeqThfv0DvKbmw}{-5dj5qCQSAGMeLZUMnorCA}{192.168.16.18}{172.20.10.9:9300} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)]])
[2019-10-23T15:03:44,611][INFO ][o.e.h.n.Netty4HttpServerTransport] [gtEEjvR] publish_address {192.168.16.18:9200}, bound_addresses {[::]:9200}
[2019-10-23T15:03:44,611][INFO ][o.e.n.Node               ] [gtEEjvR] started
[2019-10-23T15:03:45,255][INFO ][o.e.g.GatewayService     ] [gtEEjvR] recovered [4] indices into cluster_state
[2019-10-23T15:03:47,433][INFO ][o.e.c.r.a.AllocationService] [gtEEjvR] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[cmdb_hostd][3], [.kibana][0]] ...]).

#测试是否成功:

[root@elk ~]# curl 192.168.16.18:9200

{
  "name" : "gtEEjvR",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "cKFnzh3DRkimol38cXdysQ",
  "version" : {
    "number" : "6.0.1",
    "build_hash" : "601be4a",
    "build_date" : "2017-12-04T09:29:09.525Z",
    "build_snapshot" : false,
    "lucene_version" : "7.0.1",
    "minimum_wire_compatibility_version" : "5.6.0",
    "minimum_index_compatibility_version" : "5.0.0"
  },
  "tagline" : "You Know, for Search"
}

出现以上情况，证明elasticsearch可以正常使用