获取ES

下载ES，拷贝至目录 /opt

安装es

解压

1	tar -zxvf es.tar.gz

创建用户用户组，修改文件权限

由于ElasticSearch可以接收用户输入的脚本并且执行，为了系统安全考虑，需要创建一个单独的用户用来运行ElasticSearch

groupadd elastic
useradd elastic -g elastic -p 123456
# 修改权限
chown -R elsearch:elsearch elasticsearch-7.13.4

启动es

切换到es目录，启动

1
2
3

cd /opt/elasticsearch-7.13.4/bin
# -d参数为后台启动
./elasticsearch -d

检查

本地检查

1	curl 127.0.0.1:9200

外网检查

浏览器访问 {ip}:9200

可能出现的问题

启动可能遇到的问题

未使用ES_JAVA_HOME 变量

JAVA_HOME 不行的

1
2

warning: usage of JAVA_HOME is deprecated, use ES_JAVA_HOME
Future versions of Elasticsearch will require Java 11; your Java version from [/opt/jdk1.8/jre] does not meet this requirement. Consider switching to a distribution of Elasticsearch with a bundled JDK. If you are already using a distribution with a bundled JDK, ensure the JAVA_HOME environment variable is not set.

解决方案：环境变量中加入ES_JAVA_HOME

vim /etc/profile
#----------------------
# 在文件中加入
#es
export ES_JAVA_HOME=/opt/jdk1.8
#----------------------
source /etc/profile

内存不对

1
2

JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,JRE, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.io.tmpdir=/tmp/elasticsearch-3461752725857884135, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -XX:+PrintGCDetails, -XX:+PrintGCDateStamps, -XX:+PrintTenuringDistribution, -XX:+PrintGCApplicationStoppedTime, -Xloggc:logs/gc.log, -XX:+UseGCLogFileRotation, -XX:NumberOfGCLogFiles=32, -XX:GCLogFileSize=64m, -Xms1024m, -Xmx1024m, -XX:MaxDirectMemorySize=536870912, -Des.path.home=/opt/elasticsearch-7.13.4, -Des.path.conf=/opt/elasticsearch-7.13.4/config, -Des.distribution.flavor=default, -Des.distribution.type=tar, -Des.bundled_jdk=true

解决方案：修改Java虚拟机内存

vim config/jvm.options
#-------------------------

#-------------------------

外网无法访问

修改配置文件 config/elasticsearch.yml 中的 network.host 重启

vim config/elasticsearch.yml

#-----------------------------
network.host: 0.0.0.0
#-----------------------------

启动报内存不足

1
2

bootstrap checks failed. You must address the points described in the following [1] lines before starting Elasticsearch.
bootstrap check failure [1] of [1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

解决：

内存太小了，需要修改vm.max_map_count的内存大小

切换到root账户命令 su root 修改sysctl.conf文件

su root
vim /etc/sysctl.conf
#-------------------------
#添加内存
vm.max_map_count=655360
#-------------------------

sysctl -p

启动报hosts

1
2

bootstrap checks failed. You must address the points described in the following [1] lines before starting Elasticsearch.
bootstrap check failure [1] of [1]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes] must be configured

解决

vim config/elasticsearch.yml
#-------------------------
node.name: node-1
cluster.initial_master_nodes: ["node-1"]
# discovery.seed_hosts: ["127.0.0.1", "[::1]"]
#-------------------------