从零编写日志分析系统之elasticsearch5.5.2环境搭建

• 去官网找到下载地址
  官网地址：https://www.elastic.co/downloads/elasticsearch
• 在服务器里下载安装包

 wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.5.2.tar.gz

• 下载完成后解压
  tar -zxvf https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.5.2.tar.gz

• 修改解压后的文件夹的用户和用户组

 sudo chown lams_admin:lams -R elasticsearch-5.5.2/

• 修改服务器环境变量
  因为5.0以后对服务器的环境配置有要求，没有达到的话启动话报错。所以要修改服务器的环境配置。

[1]: max file descriptors [65535] for elasticsearch process is too low, increase to at least [65536]
[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

echo "vm.max_map_count=262144" >>/etc/sysctl.conf

修改/etc/security/limits.conf文件，添加或修改如下行：

*        hard    nofile           65536
*        soft    nofile           65536

修改完后重启服务器

• 编辑配置文件config/elasticsearch.yml
  修改数据存放地，我就放在es内了

 path.data: /data1/app/elasticsearch-5.5.2/data

• 修改日志存放地

 path.logs: /data1/app/elasticsearch-5.5.2/logs

• 修改监听的网络地址

 network.host: 0.0.0.0

• 后台启动服务

 ./bin/elasticsearch -d

• 通过浏览器访问elasticsearch服务
  http://127.0.0.1:9200/
  如果正确启动，就会返回下列信息

 {
  "name" : "GXBCo4z",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "Gn1oHaB6SDyJ1SoNyipPFQ",
  "version" : {
    "number" : "5.5.2",
    "build_hash" : "b2f0c09",
    "build_date" : "2017-08-14T12:33:14.154Z",
    "build_snapshot" : false,
    "lucene_version" : "6.6.0"
  },
  "tagline" : "You Know, for Search"
}

至此elasticsearch就算是搭建好了