一.版本说明
elasticsearch-5.6.0
Linux localhost.localdomain 3.10.0-229.el7.x86_64 #1 SMP Fri Mar 6 11:36:42 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
java version "1.8.0_144"
Java(TM) SE Runtime Environment (build 1.8.0_144-b01)
Java HotSpot(TM) 64-Bit Server VM (build 25.144-b01, mixed mode)
二.解压安装
tar zvxf elasticsearch-5.6.0.tar.gz
三.目录结构
├── bin
├── config
│ └── scripts
├── data
│ └── nodes
│ └── 0
│ └── _state
├── lib
├── logs
├── modules
│ ├── aggs-matrix-stats
│ ├── ingest-common
│ ├── lang-expression
│ ├── lang-groovy
│ ├── lang-mustache
│ ├── lang-painless
│ ├── parent-join
│ ├── percolator
│ ├── reindex
│ ├── transport-netty3
│ └── transport-netty4
└── plugins
四.启动服务
./bin/elasticsearch
[2017-09-16T02:12:39,550][INFO ][o.e.t.TransportService ] [7fXAbFa] publish_address {192.168.239.129:9300}, bound_addresses {[::]:9300}
[2017-09-16T02:12:39,602][INFO ][o.e.b.BootstrapChecks ] [7fXAbFa] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
[2017-09-16T02:12:45,330][WARN ][o.e.m.j.JvmGcMonitorService] [7fXAbFa] [gc][young][1][2] duration [4.5s], collections [1]/[5.6s], total [4.5s]/[5.8s], memory [266.2mb]->[43.1mb]/[1.9gb], all_pools {[young] [249.1mb]->[8.6mb]/[266.2mb]}{[survivor] [17mb]->[33.2mb]/[33.2mb]}{[old] [0b]->[7.2mb]/[1.6gb]}
[2017-09-16T02:12:45,415][WARN ][o.e.m.j.JvmGcMonitorService] [7fXAbFa] [gc][1] overhead, spent [4.5s] collecting in the last [5.6s]
[2017-09-16T02:12:53,399][INFO ][o.e.c.s.ClusterService ] [7fXAbFa] new_master {7fXAbFa}{7fXAbFa0Qw61rnNG1BfJIQ}{z9_mWtcORrGu42LUxAvp3g}{192.168.239.129}{192.168.239.129:9300}, reason: zen-disco-elected-as-master ([0] nodes joined)
[2017-09-16T02:12:53,941][INFO ][o.e.h.n.Netty4HttpServerTransport] [7fXAbFa] publish_address {192.168.239.129:9200}, bound_addresses {[::]:9200}
[2017-09-16T02:12:53,942][INFO ][o.e.n.Node ] [7fXAbFa] started
[2017-09-16T02:12:54,019][INFO ][o.e.g.GatewayService ] [7fXAbFa] recovered [0] indices into cluster_state
五.如何测试是否安装成功
浏览器输入:ip地址:9200.
{
"name" : "7fXAbFa",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "OX33WAUQSW6yLg_feAL2-g",
"version" : {
"number" : "5.6.0",
"build_hash" : "781a835",
"build_date" : "2017-09-07T03:09:58.087Z",
"build_snapshot" : false,
"lucene_version" : "6.6.0"
},
"tagline" : "You Know, for Search"
}
看到以上内容,说明服务已经启动成功啦.
到了这里服务已启动完毕
注意:启动elk服务不建议用root启动,新建用户并把elk目录权限给新建用户.
六.安装遇到的问题
1.max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
执行:sysctl -w vm.max_map_count=262144 注意:临时生效
永久生效:
vi /etc/sysctl.conf
vm.max_map_count=262144
sysctl -p (这句话必须执行,否则无法及时生效 - 从配置文件“/etc/sysctl.conf”加载内核参数设置)
2.OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x0000000085330000, 2060255232, 0) failed; error='Cannot allocate memory' (errno=12)
# There is insufficient memory for the Java Runtime Environment to continue.
# Native memory allocation (mmap) failed to map 2060255232 bytes for committing reserved memory.
# An error report file with more information is saved as:
vi config/jvm.options
将
-Xms2g
-Xmx2g
修改成
-Xms512m
-Xmx512m
3.max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
执行:ulimit -n 65536
永久生效:
vi /etc/security/limits.conf 增加内容如下:
* hard nofile 65536
* soft nofile 65536
安装错误问题汇总：
http://blog.csdn.net/qq942477618/article/details/53414983