ELK踩坑之旅

使用yum升级elasticsearch后无法重启elasticsearch服务

查看elasticsearch.log日志文件，有如下提示：

java.lang.IllegalArgumentException: Plugin [ingest-geoip] was built for Elasticsearch version 6.5.1 but version 6.5.3 is running

解决方法：

# bin/elasticsearch-plugin remove ingest-geoip
# bin/elasticsearch-plugin install ingest-geoip

再次启动服务，成功。

修改jvm.options文件中的JVM heap size设置后无法启动

查看elasticsearch.log日志文件，有如下提示：

[2018-12-14T09:28:23,603][WARN ][o.e.b.JNANatives         ] [xxx] Unable to lock JVM Memory: error=12, reason=Cannot allocate memory
[2018-12-14T09:28:23,610][WARN ][o.e.b.JNANatives         ] [xxx] This can result in part of the JVM being swapped out.
[2018-12-14T09:28:23,610][WARN ][o.e.b.JNANatives         ] [xxx] Increase RLIMIT_MEMLOCK, soft limit: 65536, hard limit: 65536
[2018-12-14T09:28:23,611][WARN ][o.e.b.JNANatives         ] [xxx] These can be adjusted by modifying /etc/security/limits.conf, for example: 
	# allow user 'elasticsearch' mlockall
	elasticsearch soft memlock unlimited
	elasticsearch hard memlock unlimited

解决：
按照提示修改/etc/security/limits.conf文件，添加如下内容

	elasticsearch soft memlock unlimited
	elasticsearch hard memlock unlimited

再次启动服务，成功。