CentOS6.5安裝Elasticsearch5.4.1+Kibana5.4.1

第一次接觸ELK，坑很多，留下記錄，讓後人少走點坑

本人環境VMware虛擬機，CentOS6.5 X86_64 1G內存

下載二進制包

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.1.tar.gz

wget https://artifacts.elastic.co/downloads/kibana/kibana-5.4.1-linux-x86_64.tar.gz

安裝JAVA 1.8版本（必需1.8及以上版本）

wget http://javadl.oracle.com/webapps/download/AutoDL?BundleId=220304_d54c1d3a095b4ff2b6607d096fa80163

rpm -ivh jre_*

解壓至指定目錄

進入解壓後的elasticsearch-5.4.1目錄

此時如果相直接 bin/elasticsearch 就啟動，會報一堆的警告和錯誤，需要對系統進行環境參數的調整，如下

(1)

vim /etc/security/limits.conf

添加如下內容:

* soft nofile 65536

* hard nofile 131072

* soft nproc 2048

* hard nproc 4096

備註：* 代表Linux所有用戶名稱

(2)

vim /etc/security/limits.d/90-nproc.conf

找到如下內容：

* soft nproc 1024

修改為

* soft nproc 2048

(3)

vim /etc/sysctl.conf

添加下面配置：

vm.max_map_count=655360

然後命令行執行

sysctl -p

(4)配置elasticsearch.yml

vim config/elasticsearch.yml

在Memory項下添加以下兩項，因為Centos6不支持SecComp，所以必須關閉bootstrap.system_call_filter

bootstrap.memory_lock: false

bootstrap.system_call_filter: false

(5)配置jvm.options

修改以下兩項內存值為適當的值（不要超來本機的內存）

-Xms2g

-Xmx2g

改為

-Xms512m

-Xmx512m

經過以上5步，現在可以啟動elasticsearch

bin/elasticsearch

正常應該出現類似如下信息，沒有WARN，沒有ERROR

[[email protected] elasticsearch-5.4.1]$ ./bin/elasticsearch &

[2017-06-20T16:03:50,845][INFO ][o.e.n.Node ] [node0] initializing ...

[2017-06-20T16:03:51,082][INFO ][o.e.e.NodeEnvironment ] [node0] using [1] data paths, mounts [[/ (/dev/mapper/vg_elastic-lv_root)]], net usable_space [13.4gb], net total_space [17.2gb], spins? [possibly], types [ext4]

[2017-06-20T16:03:51,084][INFO ][o.e.e.NodeEnvironment ] [node0] heap size [503.6mb], compressed ordinary object pointers [true]

[2017-06-20T16:03:51,117][INFO ][o.e.n.Node ] [node0] node name [node0], node ID [UzRF3doSTSCjExUTopduMw]

[2017-06-20T16:03:51,118][INFO ][o.e.n.Node ] [node0] version[5.4.1], pid[27739], build[2cfe0df/2017-05-29T16:05:51.443Z], OS[Linux/2.6.32-431.el6.x86_64/amd64], JVM[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0_131/25.131-b11]

[2017-06-20T16:03:51,120][INFO ][o.e.n.Node ] [node0] JVM arguments [-Xms512m, -Xmx512m, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+DisableExplicitGC, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -Djdk.io.permissionsUseCanonicalPath=true, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j.skipJansi=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.path.home=/home/program/elasticsearch-5.4.1]

[2017-06-20T16:03:53,777][INFO ][o.e.p.PluginsService ] [node0] loaded module [aggs-matrix-stats]

[2017-06-20T16:03:53,778][INFO ][o.e.p.PluginsService ] [node0] loaded module [ingest-common]

[2017-06-20T16:03:53,778][INFO ][o.e.p.PluginsService ] [node0] loaded module [lang-expression]

[2017-06-20T16:03:53,778][INFO ][o.e.p.PluginsService ] [node0] loaded module [lang-groovy]

[2017-06-20T16:03:53,779][INFO ][o.e.p.PluginsService ] [node0] loaded module [lang-mustache]

[2017-06-20T16:03:53,779][INFO ][o.e.p.PluginsService ] [node0] loaded module [lang-painless]

[2017-06-20T16:03:53,779][INFO ][o.e.p.PluginsService ] [node0] loaded module [percolator]

[2017-06-20T16:03:53,780][INFO ][o.e.p.PluginsService ] [node0] loaded module [reindex]

[2017-06-20T16:03:53,780][INFO ][o.e.p.PluginsService ] [node0] loaded module [transport-netty3]

[2017-06-20T16:03:53,781][INFO ][o.e.p.PluginsService ] [node0] loaded module [transport-netty4]

[2017-06-20T16:03:53,782][INFO ][o.e.p.PluginsService ] [node0] no plugins loaded

[2017-06-20T16:03:58,449][INFO ][o.e.d.DiscoveryModule ] [node0] using discovery type [zen]

[2017-06-20T16:04:00,106][INFO ][o.e.n.Node ] [node0] initialized

[2017-06-20T16:04:00,106][INFO ][o.e.n.Node ] [node0] starting ...

[2017-06-20T16:04:20,593][INFO ][o.e.t.TransportService ] [node0] publish_address {127.0.0.1:9300}, bound_addresses {[::1]:9300}, {127.0.0.1:9300}

[2017-06-20T16:04:23,732][INFO ][o.e.c.s.ClusterService ] [node0] new_master {node0}{UzRF3doSTSCjExUTopduMw}{qPQnF3K6Q92g6qEJEcnIiA}{127.0.0.1}{127.0.0.1:9300}, reason: zen-disco-elected-as-master ([0] nodes joined)

[2017-06-20T16:04:23,875][INFO ][o.e.h.n.Netty4HttpServerTransport] [node0] publish_address {127.0.0.1:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}

[2017-06-20T16:04:23,880][INFO ][o.e.n.Node ] [node0] started

[2017-06-20T16:04:24,400][INFO ][o.e.g.GatewayService ] [node0] recovered [1] indices into cluster_state

此時可以在本機使用 curl http://localhost:9200 訪問接口，由於elasticsearch.yml默認配置為只能本機訪問，所以其它機器或瀏覽器無法訪問此地址

進入解壓後的kibana-5.4.1目錄

修改配置文件kibana.yml

vim config/kibana.yml

把

server.host: "localhost"

改為

server.host: "0.0.0.0"

否則無法在其它機器訪問到kibana

啟動

./bin/kibana &

正常應該出現類似如下信息，沒有WARN，沒有ERROR

log [08:15:01.753] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready

log [08:15:02.076] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for Elasticsearch

log [08:15:02.124] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready

log [08:15:02.247] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready

log [08:15:02.263] [info][status][plugin:[email protected]] Status changed from yellow to green - Kibana index ready

log [08:15:02.905] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready

log [08:15:02.955] [info][listening] Server running at http://0.0.0.0:5601

log [08:15:02.957] [info][status][ui settings] Status changed from uninitialized to green - Ready

在瀏覽器訪問http://YOURIPADDRESS:5601 正常訪問，成功

CentOS6.5安裝Elasticsearch5.4.1+Kibana5.4.1