ELK

1、 java 安装环境变量设置

jdk 下载地址 https://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html

下载解压放到 /usr/local/java 目下下

环境变量设置, 最后面添加如下三行
vim /etc/profile

export JAVA_HOME=/usr/local/java/
export CLASSPATH=.:$JAVA_HOME/jre/lib/rt.jar:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar 
export PATH=$JAVA_HOME/bin:$PATH

source /etc/profile

测试

[root@lc3q ~]# java -version
java version "1.8.0_181"
Java(TM) SE Runtime Environment (build 1.8.0_181-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.181-b13, mixed mode)

2、elasticsearch 搭建

wget wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.3.2.tar.gz
tar -zxf elasticsearch-6.3.2.tar.gz
mv elasticsearch-6.3.2 /usr/local/
ln -s elasticsearch-6.3.2/ elasticsearch

创建一个非root 用户 elastic 启动服务

useradd elastic
chown -R /usr/local/elasticsearch-6.3.2/

启动elasticsearch

/usr/local/elasticsearch/bin/elasticsearch

报错1

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

解决

vim /etc/security/limits.conf

elastic hard nofile 65536
elastic soft nofile 65536

报错2

 [2]memory locking requested for elasticsearch process but memory is not locked

解决:

elastic        soft    memlock          unlimited
elastic        hard    memlock          unlimited

报错3

[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

解决:

vim /etc/sysctl.conf
vm.max_map_count=655360
wq
sysctl -p 生效

3 elasticsearch head 插件

权限设置

vim /etc/elasticsearch/elasticsearch.yml
http.cors.enabled: true                                     # elasticsearch中启用CORS
http.cors.allow-origin: "*"                                 # 允许访问的IP地址段，* 为所有IP都

下载安装

wget https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-x64.tar.xz
xz -d node-v8.11.3-linux-x64.tar.xz    
tar -xf node-v8.11.3-linux-x64.tar
mv node-v8.11.3-linux-x64 /usr/local/              #放在 /usr/local 目录下
ln -s node-v8.11.3-linux-x64/ node                  
ln -s /usr/local/node/bin/ /usr/bin/               # 链接到 /usr/bin 下

node -v                                   #验证

yum install git -y
git clone https://github.com/mobz/elasticsearch-head.git
cd elasticsearch-head/
npm install    #忽略报错
npm install phantomjs-prebuilt@2.1.16 --ignore-scripts
npm run start               #启动