配置文件

  1. #egrep -v "#|^$" /apps/usr/elasticsearch/config/elasticsearch.yml
  2. cluster.name: elk
  3. node.name: elk-112
  4. node.master: true
  5. node.data: true
  6. path.data: /home/opt/elasticsearch/data
  7. path.logs: /home/opt/elasticsearch/logs
  8. bootstrap.memory_lock: true
  9. indices.fielddata.cache.size: 50mb
  10. network.host: 0.0.0.0
  11. http.port: 9200
  12. discovery.zen.ping.unicast.hosts: ["10.8.18.30:9300","10.8.18.31:9300","10.8.18.32:9300"]
  13. discovery.zen.minimum_master_nodes: 3
  14. http.cors.enabled: true
  15. http.cors.allow-origin: "*"
  16. http.cors.allow-headers: "X-Requested-With,Content-Type, Content-Length, Authorization"

内核调整

  1. # 修改文件限制 /etc/security/limits.conf, memlock 最大锁定内存地址空间
  2. elasticsearch soft memlock unlimited
  3. elasticsearch hard memlock unlimited
  4. elasticsearch soft nofile 65536
  5. elasticsearch hard nofile 131072
  7. # 修改用户的进程限制 /etc/security/limits.d/20-nproc.conf 
  8. *          soft    nproc     4096
  9. root       soft    nproc     unlimited
  11. # /etc/sysctl.conf 
  12. # 修改最大打开文件描述符数，建议修改为655360或者更高
  13. fs.file-max=655360
  14. # 直接影响java线程数量，用来限制一个进程可以用于VM（虚拟内存区域大小）默认为65530，建议修改为262144或者更高
  15. vm.max_map_count=262144
  17. #系统调整后执行
  18. $ sysctl -p

报错

虚拟内存不足

  1. #最大虚拟内存区域vm.max_map_count[65530]太低，至少增加到[262144]
  2. [1] bootstrap checks failed
  3. [1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
  4. #调整
  5. #fs.file-max=655360
  6. #vm.max_map_count=262144
  7. #sysctl -p

创建node环境错误

  1. java.lang.IllegalStateException: Failed to create node environment
  2.         at org.elasticsearch.node.Node.<init>(Node.java:298) ~[elasticsearch-6.6.2.jar:6.6.2]
  3.         at org.elasticsearch.node.Node.<init>(Node.java:265) ~[elasticsearch-6.6.2.jar:6.6.2]
  4.         at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:212) ~[elasticsearch-
  5.         ......
  6.         at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93) [elasticsearch-6.6.2.jar:6.6.2]
  7. Caused by: java.nio.file.AccessDeniedException: /home/opt/data/elasticsearch/nodes

Es配置与问题解决 - 图1

plugin目录无法加载插件

  1. Could not load plugin descriptor for plugin directory [head]

删除head即可

主节点不足

  1. [elfk-112] not enough master nodes discovered during pinging
  3. #discovery.zen.minimum_master_nodes: 1