### 基礎環境部署 #### 阿里YUM源配置（略） #### 全局JDK 1.8部署 ```shell yum install java-1.8.131 ``` #### 配置系統參數 ##### 配置內存鎖 ```shell #追加 /etc/security/limits.conf echo " " >> /etc/security/limits.conf echo "#elasticsearch memlock dinghe add 20170828 " >> /etc/security/limits.conf echo "elasticsearch soft memlock unlimited" >> /etc/security/limits.conf echo "elasticsearch hard memlock unlimited" >> /etc/security/limits.conf ``` ##### 配置文件描述符 ```shell echo " " >> /etc/security/limits.conf echo "#limit dinghe add 20170828 " >> /etc/security/limits.conf echo "* soft nofile 65536" >> /etc/security/limits.conf echo "* hard nofile 65536" >> /etc/security/limits.conf ``` ##### 配置map_counter ```shell echo "#elasticsearch inti dinghe add 20170828" >> /etc/sysctl.conf echo "vm.max_map_count = 262144" >> /etc/sysctl.conf ``` ##### 重啟服務器 ### ELK安裝（RPM安裝、強烈推薦） ```shell rpm -ivh elasticsearch-5.5.0.rpm #修改用戶shell usermod elasticsearch -s /bin/bash #5.5版本的rpm安裝會出現變量找到到（oracle java找不到）和memlock配置不生效的情況，修改用戶shell后或使用openjdk解決 ``` ### 配置Elasticsearch #### 創建用戶和基礎目錄 ```shell mkdir /data/es-data #多磁盤方式mkdir /data/es01,/data/es02 chown -R elasticsearch. /data/es-data ``` 修改相關配置 vim /etc/elasticsearch/elasticsearch.yml ```shell cluster.name: es-cluster node.name: master-1 path.data: /data/es_data/ network.host: 192.168.0.232 http.port: 9200 discovery.zen.ping.unicast.hosts: ["192.168.0.232", "192.168.0.231"] ``` 配置注釋 ```shell #集群名稱 cluster.name: es-cluster #本節點名稱 node.name: master-1 #數據文件位置 path.data: /data/es_data/ #日志位置 path.logs: /app/logs/es #配置綁定IP network.host: 192.168.0.232 #配置服務端口（9300為集群選舉使用的端口） http.port: 9200 #使用單播的方式發現集群節點，避免網絡波動和云服務器網絡限制造成的節點發現失敗問題 discovery.zen.ping.unicast.hosts: ["192.168.0.232", "192.168.0.231"] ``` #### 啟動ES服務 ```shell #源碼包啟動 /app/es/bin/elasticsearch systemctl restart elasticsearch ``` ### 安裝elasticsearch-head插件 #### Chrome插件方式（推薦） Chrome插件中搜索 elasticsearch head http://pan.baidu.com/s/1slSDvv3 #### 服務模式 ```shell cd /opt git clone git://github.com/mobz/elasticsearch-head.git cd elasticsearch-head/ npm install grunt-cli --registry=https://registry.npm.taobao.org #備注：grunt是Javascrip的構建工具 npm install --registry=https://registry.npm.taobao.org #安裝過程中會下載phantomjs-2.1.1-linux-x86_64.tar.bz2，取消下載即可 npm run start ``` 訪問elasticsearch-head插件 ```shell open (http://localhost:9100/) ``` #### 錯誤處理 ##### 錯誤1(RPM包處理方式)：elasticsearch 5.x which: no java in - 安裝的jdk 1.8.121，不成功，安裝openjava-jdk1.8.131成功 - 或修改elasticsearch用戶 usermod elasticsearch -s /bin/bash ##### 錯誤2：bootstrap.memory_lock: true導致Elasticsearch啟動失敗問題（RPM安裝未解決） ```shell ...略 # allow user 'elasticsearch' mlockall elasticsearch soft memlock unlimited elasticsearch hard memlock unlimited ...略 ERROR: bootstrap checks failed memory locking requested for elasticsearch process but memory is not locked ...略 ``` 解決： ```shell #追加 /etc/security/limits.conf elasticsearch soft memlock unlimited elasticsearch hard memlock unlimited ``` ##### 錯誤3：max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144] ```shell echo "vm.max_map_count = 262144" >> /etc/sysctl.conf ``` ##### 錯誤4：Centos 6.x 安裝elasticsearch5.2無法啟動bug 報錯： ```shell ERROR: bootstrap checks failed system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk ``` 原因： ```shell 這是在因為Centos6不支持SecComp，而ES5.2.0默認bootstrap.system_call_filter為true進行檢測，所以導致檢測失敗，失敗后直接導致ES不能啟動。 ``` 解決： ```shell 在elasticsearch.yml中配置bootstrap.system_call_filter為false，注意要在Memory下面: bootstrap.memory_lock: false bootstrap.system_call_filter: false ``` 可以查看issues https://github.com/elastic/elasticsearch/issues/22 ##### 錯誤5：文件描述符設置太小 報錯 ```shell max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536] max number of threads [1024] for user [[elasticsearch] is too low, increase to at least [2048] ``` 解決 編輯limits.conf 文件 ```shell #vim /etc/security/limits.conf * soft nofile 65536 * hard nofile 65536 #Centos6.x修改vim /etc/security/limits.d/90-nproc.conf soft nproc 1024 修改為 soft nproc 2048 sysctl -p ```