elasticsearch安装之后。启动报错。elasticsearch版本为5.4.1
下载安装：
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.1.tar.gz tar zxf elasticsearch-5.4.1.tar.gz mv elasticsearch-5.4.1 /usr/local/elasticsearch cd /usr/local/elasticsearch/ ./bin/elasticsearch
[2017-06-20T09:57:45,307][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [node-1] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:127) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:114) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:67) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:122) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.cli.Command.main(Command.java:88) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:91) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:84) ~[elasticsearch-5.4.1.jar:5.4.1]
Caused by: java.lang.RuntimeException: can not run elasticsearch as root
at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:106) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:194) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:350) ~[elasticsearch-5.4.1.jar:5.4.1]
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:123) ~[elasticsearch-5.4.1.jar:5.4.1]
... 6 more
原因：elasticsearch自5版本之后，处于安全考虑，不允许使用root用户运行。
解决：创建一个普通用户，将elasticsearch 安装目录权限修改一下，切换至普通用户运行elasticsearch就可以了
useradd elk chown -R elk.elk /usr/local/elasticsearch/ su - elk cd /usr/local/elasticsearch/ [elk@node1 elasticsearch]$ ./bin/elasticsearch
[2017-06-20T19:38:54,458][INFO ][o.e.n.Node ] [node-1] initializing ...
[2017-06-20T19:38:54,535][INFO ][o.e.e.NodeEnvironment ] [node-1] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [12
.7gb], net total_space [14.5gb], spins? [unknown], types [rootfs][2017-06-20T19:38:54,536][INFO ][o.e.e.NodeEnvironment ] [node-1] heap size [1.9gb], compressed ordinary object pointers [true]
[2017-06-20T19:38:54,537][INFO ][o.e.n.Node ] [node-1] node name [node-1], node ID [3XuI5pfIRN6MUEuRkq6ZHw]
[2017-06-20T19:38:54,537][INFO ][o.e.n.Node ] [node-1] version[5.4.1], pid[2245], build[2cfe0df/2017-05-29T16:05:51.443Z
], OS[Linux/3.10.0-327.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_131/25.131-b12][2017-06-20T19:38:54,537][INFO ][o.e.n.Node ] [node-1] JVM arguments [-Xms2g, -Xmx2g, -XX:+UseConcMarkSweepGC, -XX:CMSIn
itiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+DisableExplicitGC, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -Djdk.io.permissionsUseCanonicalPath=true, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j.skipJansi=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.path.home=/usr/local/elasticsearch][2017-06-20T19:38:55,358][INFO ][o.e.p.PluginsService ] [node-1] loaded module [aggs-matrix-stats]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [ingest-common]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-expression]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-groovy]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-mustache]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-painless]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [percolator]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [reindex]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [transport-netty3]
[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService ] [node-1] loaded module [transport-netty4]
[2017-06-20T19:38:55,360][INFO ][o.e.p.PluginsService ] [node-1] no plugins loaded
[2017-06-20T19:38:56,602][INFO ][o.e.d.DiscoveryModule ] [node-1] using discovery type [zen]
[2017-06-20T19:38:57,145][INFO ][o.e.n.Node ] [node-1] initialized
[2017-06-20T19:38:57,146][INFO ][o.e.n.Node ] [node-1] starting ...
[2017-06-20T19:38:57,423][INFO ][o.e.t.TransportService ] [node-1] publish_address {192.168.199.17:9300}, bound_addresses {192.168.1
99.17:9300}[2017-06-20T19:38:57,429][INFO ][o.e.b.BootstrapChecks ] [node-1] bound or publishing to a non-loopback or non-link-local address,
enforcing bootstrap checksERROR: [2] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2017-06-20T19:38:57,443][INFO ][o.e.n.Node ] [node-1] stopping ...
[2017-06-20T19:38:57,469][INFO ][o.e.n.Node ] [node-1] stopped
[2017-06-20T19:38:57,469][INFO ][o.e.n.Node ] [node-1] closing ...
[2017-06-20T19:38:57,498][INFO ][o.e.n.Node ] [node-1] closed
跟系统优化参数有关。修改sysctl内核参数
sysctl -w vm.max_map_count=262144 [root@node1 ~]# echo "vm.max_map_count=262144" >> /etc/sysctl.conf [root@node1 ~]# sysctl -p vm.max_map_count = 262144 [root@node1 ~]# vi /etc/security/limits.conf * soft nofile 65536 * hard nofile 65536
重新启动：
[elk@node1 elasticsearch]$ ./bin/elasticsearch
[2017-06-20T19:54:32,887][INFO ][o.e.n.Node ] [node-1] initializing ...
[2017-06-20T19:54:32,958][INFO ][o.e.e.NodeEnvironment ] [node-1] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [12
.7gb], net total_space [14.5gb], spins? [unknown], types [rootfs][2017-06-20T19:54:32,958][INFO ][o.e.e.NodeEnvironment ] [node-1] heap size [1.9gb], compressed ordinary object pointers [true]
[2017-06-20T19:54:32,959][INFO ][o.e.n.Node ] [node-1] node name [node-1], node ID [3XuI5pfIRN6MUEuRkq6ZHw]
[2017-06-20T19:54:32,960][INFO ][o.e.n.Node ] [node-1] version[5.4.1], pid[2244], build[2cfe0df/2017-05-29T16:05:51.443Z
], OS[Linux/3.10.0-327.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_131/25.131-b12][2017-06-20T19:54:32,960][INFO ][o.e.n.Node ] [node-1] JVM arguments [-Xms2g, -Xmx2g, -XX:+UseConcMarkSweepGC, -XX:CMSIn
itiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+DisableExplicitGC, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -Djdk.io.permissionsUseCanonicalPath=true, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j.skipJansi=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.path.home=/usr/local/elasticsearch][2017-06-20T19:54:33,856][INFO ][o.e.p.PluginsService ] [node-1] loaded module [aggs-matrix-stats]
[2017-06-20T19:54:33,856][INFO ][o.e.p.PluginsService ] [node-1] loaded module [ingest-common]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-expression]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-groovy]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-mustache]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-painless]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [percolator]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [reindex]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [transport-netty3]
[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService ] [node-1] loaded module [transport-netty4]
[2017-06-20T19:54:33,858][INFO ][o.e.p.PluginsService ] [node-1] no plugins loaded
[2017-06-20T19:54:35,473][INFO ][o.e.d.DiscoveryModule ] [node-1] using discovery type [zen]
[2017-06-20T19:54:36,118][INFO ][o.e.n.Node ] [node-1] initialized
[2017-06-20T19:54:36,118][INFO ][o.e.n.Node ] [node-1] starting ...
[2017-06-20T19:54:36,304][INFO ][o.e.t.TransportService ] [node-1] publish_address {192.168.199.17:9300}, bound_addresses {192.168.1
99.17:9300}[2017-06-20T19:54:36,310][INFO ][o.e.b.BootstrapChecks ] [node-1] bound or publishing to a non-loopback or non-link-local address,
enforcing bootstrap checks[2017-06-20T19:54:39,402][INFO ][o.e.c.s.ClusterService ] [node-1] new_master {node-1}{3XuI5pfIRN6MUEuRkq6ZHw}{8FjudtquQS-SkPWx0B7d5
A}{192.168.199.17}{192.168.199.17:9300}, reason: zen-disco-elected-as-master ([0] nodes joined)[2017-06-20T19:54:39,438][INFO ][o.e.h.n.Netty4HttpServerTransport] [node-1] publish_address {192.168.199.17:9200}, bound_addresses {1
92.168.199.17:9200}[2017-06-20T19:54:39,446][INFO ][o.e.n.Node ] [node-1] started
[2017-06-20T19:54:39,452][INFO ][o.e.g.GatewayService ] [node-1] recovered [0] indices into cluster_state
启动成功。按ctrl+C退出。使用-d参数让服务在后台运行
[elk@node1 local]$ ./elasticsearch/bin/elasticsearch -d
这样就启动成功了。
注意：普通用户不能修改打开文件句柄数，切换到root用户，修改之后需要重启。