ELK7.3.1 單臺部署elasticsearch和kibana

環(huán)境初始化

sysctl -w vm.max_map_count=262144
root@jindi-ES:/data/elasticsearch/logs# cat /etc/security/limits.conf
* soft nproc 1000000
* hard nproc 1000000
* soft nofile 1000000
* hard nofile 1000000

獲取elasticsearch和kibana

root@fangxin-test:~# wget  https://artifacts.elastic.co/downloads/kibana/kibana-7.3.1-amd64.deb
root@fangxin-test:~# wget  https://artifacts.elastic.co/downloads/kibana/kibana-7.3.1-linux-x86_64.tar.gz
root@fangxin-test:~#  wget  https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.3.1.tar.gz      

root@fangxin-test:~# wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.3.1-amd64.deb

使用dpkg安裝

root@fangxin-test:~# dpkg -i elasticsearch-7.3.1-amd64.deb 
root@fangxin-test:~# dpkg -i kibana-7.3.1-amd64.deb 

配置文件

elasticsearch

root@fangxin-test:~# cat /etc/elasticsearch/elasticsearch.yml |grep -vE "^#|^$"
node.name: es-1
path.data: /data/elasticsearch/data 
path.logs: /data/elasticsearch/logs
network.host: 10.0.109.17 
http.port: 9200
cluster.initial_master_nodes: ["es-1"]

kibana

root@fangxin-test:~# cat /etc/kibana/kibana.yml |grep -vE "^#|^$"
server.host: 10.0.109.17
elasticsearch.hosts: ["http://10.0.109.17:9200"]

啟動

root@fangxin-test:~#/etc/init.d/elasticsearch start
root@fangxin-test:~#/etc/init.d/kibana

查看啟動

ps -ef|grep -E "el|kibana"

注意 報錯處理

.

 ERROR: [1] bootstrap checks failed
[1]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes] must be configured
    添加： elasticsearch.yml 第72行 ：cluster.initial_master_nodes: ["es-1"]  es-1是你上面設(shè)置的node-name

.

ERROR: [1] bootstrap checks failed
[1]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, d                                                                                                                           is    covery.seed_providers, cluster.initial_master_nodes] must be configured
 #修改config/elasticsearch.yml下約第23行，放開node.name注釋，可更改名稱
 node.name: es-1