ElasticSearch 安装

使用Elasticsearch5.0 必须安装jdk1.8

[elsearch@vm-mysteel-dc-search01 bin]$ java -version

java version"1.8.0_112"

Java(TM) SE Runtime Environment (build1.8.0_112-b15)

Java HotSpot(TM)64-Bit Server VM (build25.112-b15, mixed mode)

[elsearch@vm-mysteel-dc-search01 bin]$

使用root账号启动es后 会遇到以下问题

[2016-11-14T10:05:29,358][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [] uncaught exception in thread

[main]

org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root

at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:116) ~[elasticsearch-

5.0.0.jar:5.0.0]

at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:103) ~[elasticsearch-

5.0.0.jar:5.0.0]

at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54) ~[elasticsearch-

5.0.0.jar:5.0.0]

atorg.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:96) ~[elasticsearch-

5.0.0.jar:5.0.0]

atorg.elasticsearch.cli.Command.main(Command.java:62) ~[elasticsearch-5.0.0.jar:5.0.0]

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80) ~[elasticsearch-

5.0.0.jar:5.0.0]

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:73) ~[elasticsearch-

5.0.0.jar:5.0.0]

解决方案：

因为安全问题elasticsearch 不让用root用户直接运行，所以要创建新用户

    1.建议创建一个单独的用户用来运行ElasticSearch

    2.创建elsearch用户组及elsearch用户

groupadd elsearch

useradd elsearch-g elsearch -p elasticsearch

经用户目录权限

解决方法： chown -R 用户名:用户名  文件（目录）名

例如： chown -R abc:abc searchengine

使用elsearch启动ES后 又会遇到以下问题

ERROR: bootstrap checks failed

max file descriptors [10240]forelasticsearch process likely too low, increase to at least [65536]

max number of threads [1024]foruser [elsearch] likely too low, increase to at least [2048]

maxvirtualmemory areas vm.max_map_count [65530] likely too low, increase to at least [262144]

[2016-11-14T10:22:17,569][INFO ][o.e.n.Node ] [mysteel-node1] stopping ...

[2016-11-14T10:22:17,615][INFO ][o.e.n.Node ] [mysteel-node1] stopped

[2016-11-14T10:22:17,615][INFO ][o.e.n.Node ] [mysteel-node1] closing ...

[2016-11-14T10:22:17,638][INFO ][o.e.n.Node ] [mysteel-node1] closed

解决方法参考 ：http://www.cnblogs.com/sloveling/p/elasticsearch.html

切换到root用户

vi /etc/security/limits.conf

添加如下内容:

* soft nofile65536

* hard nofile131072

* soft nproc2048

* hard nproc4096

vi /etc/security/limits.d/90-nproc.conf

修改如下内容：

* soft nproc1024

#修改为

* soft nproc2048

vi /etc/sysctl.conf 

添加下面配置：

vm.max_map_count=655360

并执行命令：

sysctl-p

然后，重新启动elasticsearch，即可启动成功。

Elasticsearch5.0 安装问题集锦

elasticsearch 5.0 安装过程中遇到了一些问题，通过查找资料几乎都解决掉了，这里简单记录一下 ，供以后查阅参考，也希望可以帮助遇到同样问题的你。

问题一：警告提示

[2016-11-06T16:27:21,712][WARN ][o.e.b.JNANatives ] unable to install syscall filter: 

java.lang.UnsupportedOperationException: seccomp unavailable: requires kernel 3.5+ with CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER compiled in

at org.elasticsearch.bootstrap.Seccomp.linuxImpl(Seccomp.java:349) ~[elasticsearch-5.0.0.jar:5.0.0]

at org.elasticsearch.bootstrap.Seccomp.init(Seccomp.java:630) ~[elasticsearch-5.0.0.jar:5.0.0]

报了一大串错误，其实只是一个警告。

解决：使用心得linux版本，就不会出现此类问题了。

问题二：ERROR: bootstrap checks failed

max file descriptors [4096] for elasticsearch process likely too low, increase to at least [65536]

max number of threads [1024] for user [lishang] likely too low, increase to at least [2048]

解决：切换到root用户，编辑limits.conf 添加类似如下内容

vi /etc/security/limits.conf 

添加如下内容:

* soft nofile 65536

* hard nofile 131072

* soft nproc 2048

* hard nproc 4096

问题三：max number of threads [1024] for user [lish] likely too low, increase to at least [2048]

解决：切换到root用户，进入limits.d目录下修改配置文件。

vi /etc/security/limits.d/90-nproc.conf 

修改如下内容：

* soft nproc 1024

#修改为

* soft nproc 2048

问题四：max virtual memory areas vm.max_map_count [65530] likely too low, increase to at least [262144]

解决：切换到root用户修改配置sysctl.conf

vi /etc/sysctl.conf 

添加下面配置：

vm.max_map_count=655360

并执行命令：

sysctl -p

然后，重新启动elasticsearch，即可启动成功。

如果没有生效，请重启服务器试试。

参考：http://blog.csdn.net/u012371450/article/details/51776505

修改访问elasticsearch的IP及端口

[seven@localhostconfig]$vim /usr/java/elasticsearch/config/elasticsearch.yml

1.找到如下代码段，并取消network.host及http.port所在行的注释，修改IP及端口

# ---------------------------------- Network -----------------------------------

#

# Set the bind address to a specific IP (IPv4 or IPv6):

#

network.host:192.168.0.155

#

# Set a custom port for HTTP:

#

http.port:9200

#

# For more information, see the documentation at:

#

直接运行bin/elasticsearch文件启动elasticsearch

[seven@localhostbin]$cd /usr/java/elasticsearch/bin/

[seven@localhostbin]$./elasticsearch

启动时发现报错了。。。

[seven@localhost bin]$ ./elasticsearch

[2016-06-2813:49:27,899][INFO][node] [Mondo] version[5.0.0-alpha3], pid[3671], build[cad959b/2016-05-26T08:25:57.564Z], OS[Linux/3.10.0-327.el7.x86_64/amd64], JVM[Oracle Corporation/Java HotSpot(TM)64-BitServerVM/1.0_91/25.91-b14]

▽2016-06-2813:49:27,900][INFO][node] [Mondo] initializing ...

[2016-06-2813:49:28,941][INFO][plugins] [Mondo] modules [percolator, lang-mustache, lang-painless, ingest-grok, reindex, lang-expression, lang-groovy], plugins []

[2016-06-2813:49:28,963][INFO][env] [Mondo] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [15.7gb], net total_space [17.4gb], spins? [unknown], types [rootfs]

[2016-06-2813:49:28,963][INFO][env] [Mondo] heap size [1.9gb], compressed ordinary object pointers [true]

[2016-06-2813:49:31,980][INFO][node] [Mondo] initialized

[2016-06-2813:49:31,980][INFO][node] [Mondo] starting ...

[2016-06-2813:49:32,115][INFO][transport] [Mondo] publish_address {192.168.0.155:9300}, bound_addresses {192.168.0.155:9300}

Exceptioninthread"main"java.lang.RuntimeException: bootstrap checks failed

initial heap size [268435456]notequaltomaximum heap size [2147483648]; this can cause resize pausesandprevents mlockall from locking the entire heap

max file descriptors [4096]forelasticsearch process likely too low, increasetoat least [65536]

pleaseset[discovery.zen.minimum_master_nodes]toa majority of the number of master eligible nodesinyour cluster

max virtual memory areas vm.max_map_count [65530] likely too low, increasetoat least [262144]

at org.elasticsearch.bootstrap.BootstrapCheck.check(BootstrapCheck.java:125)

at org.elasticsearch.bootstrap.BootstrapCheck.check(BootstrapCheck.java:85)

at org.elasticsearch.bootstrap.BootstrapCheck.check(BootstrapCheck.java:65)

at org.elasticsearch.bootstrap.Bootstrap$5.validateNodeBeforeAcceptingRequests(Bootstrap.java:183)

at org.elasticsearch.node.Node.start(Node.java:337)

at org.elasticsearch.bootstrap.Bootstrap.start(Bootstrap.java:198)

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:257)

at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:96)

at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:91)

at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54)

atorg.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:91)

atorg.elasticsearch.cli.Command.main(Command.java:53)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:70)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:63)

Refertothelogforcompleteerrordetails.

[2016-06-2813:49:32,144][INFO][node] [Mondo] stopping ...

[2016-06-2813:49:32,198][INFO][node] [Mondo] stopped

[2016-06-2813:49:32,198][INFO][node] [Mondo] closing ...

[2016-06-2813:49:32,210][INFO][node] [Mondo] closed

于是我临时提高了vm.max_map_count的大小 

*此操作需要root权限

[root@localhost~]# sysctl -w vm.max_map_count=262144

查看修改结果

[root@localhost~]# sysctl -a|grep vm.max_map_count

vm.max_map_count =262144

或者永久性修改

[root@localhost~]# cat /etc/sysctl.conf | grep -v "vm.max_map_count" > /tmp/system_sysctl.conf

[root@localhost~]# echo "vm.max_map_count=262144" >> /tmp/system_sysctl.conf

[root@localhost~]# mv /tmp/system_sysctl.conf /etc/sysctl.conf

mv：是否覆盖"/etc/sysctl.conf"？ y

[root@localhost~]# cat /etc/sysctl.conf

# System default settings live in /usr/lib/sysctl.d/00-system.conf.

# To override those settings, enter new settings here, or in an /etc/sysctl.d/.conf file

#

# For more information, see sysctl.conf(5) and sysctl.d(5).

vm.max_map_count=262144

[root@localhost~]# sysctl -p

vm.max_map_count =262144

上面还有一个错误是关于jvm内存分配的问题heap size [268435456] not equal to maximum heap size [2147483648]，需要修改的jvm配置

[seven@localhostbin]$vim /usr/java/elasticsearch/config/jvm.options

将-Xmx2g改成-Xmx256m，也就是heap size [268435456] /1024/1024的值

又有新的错误。。。

Exceptioninthread"main"java.lang.RuntimeException: bootstrap checks failed

initial heap size [268435456]notequaltomaximum heap size [2147483648]; this can cause resize pausesandprevents mlockall from locking the entire heap

max file descriptors [4096]forelasticsearch process likely too low, increasetoat least [65536]

memory locking requestedforelasticsearch process but memoryisnotlocked

at org.elasticsearch.bootstrap.BootstrapCheck.check(BootstrapCheck.java:125)

at org.elasticsearch.bootstrap.BootstrapCheck.check(BootstrapCheck.java:85)

at org.elasticsearch.bootstrap.BootstrapCheck.check(BootstrapCheck.java:65)

at org.elasticsearch.bootstrap.Bootstrap$5.validateNodeBeforeAcceptingRequests(Bootstrap.java:183)

at org.elasticsearch.node.Node.start(Node.java:337)

at org.elasticsearch.bootstrap.Bootstrap.start(Bootstrap.java:198)

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:257)

at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:96)

at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:91)

at org.elasticsearch.cli.SettingCommand.execute(SettingCommand.java:54)

at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:91)

at org.elasticsearch.cli.Command.main(Command.java:53)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:70)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:63)

Refertothelogforcompleteerrordetails.

[2016-06-2814:55:49,770][INFO ][node ] [Goldbug] stopping ...

[2016-06-2814:55:49,875][INFO ][node ] [Goldbug] stopped

[2016-06-2814:55:49,875][INFO ][node ] [Goldbug] closing ...

[2016-06-2814:55:49,887][INFO ][node ] [Goldbug] closed

这个问题折腾了我一下午，最后还是找到了解决方案，同样回到config/elasticsearch.yml文件，找到如下配置，开放discovery.zen.ping.unicast.hosts及discovery.zen.minimum_master_nodes

# --------------------------------- Discovery ----------------------------------

#

# Pass an initial list of hosts to perform discovery when new node is started:

# The default list of hosts is ["127.0.0.1", "[::1]"]

#

discovery.zen.ping.unicast.hosts: ["192.168.0.155"]

#

# Prevent the "split brain" by configuring the majority of nodes (total number of nodes / 2 + 1):

#

discovery.zen.minimum_master_nodes:3

#

# For more information, see the documentation at:

#

然后修改max file descriptors [4096] for elasticsearch process likely too low, increase to at least [65536]这个错误（切换到root操作）

[root@localhost~]# cp /etc/security/limits.conf /etc/security/limits.conf.bak

[root@localhost~]# cat /etc/security/limits.conf | grep -v "seven" > /tmp/system_limits.conf

[root@localhost~]# echo "seven hard nofile 65536" >> /tmp/system_limits.conf

[root@localhost~]# echo "seven soft nofile 65536" >> /tmp/system_limits.conf

[root@localhost~]# mv /tmp/system_limits.conf /etc/security/limits.conf

修改后重新登录seven用户，使用如下命令查看是否修改成功

[seven@localhost~]$ulimit -Hn

65536

接下来就可以启动elasticsearch了，启动完成使用浏览器访问http://192.168.0.155:9200

{

"name":"Vampire by Night",

"cluster_name":"elasticsearch",

"version":{

"number":"5.0.0-alpha3",

"build_hash":"cad959b",

"build_date":"2016-05-26T08:25:57.564Z",

"build_snapshot":false,

"lucene_version":"6.0.0"

},

"tagline":"You Know, for Search"

}