elk安装遇到问题

查看安装目录logs/下目录

# ElasticSearch
[ERROR][o.e.b.Bootstrap ] [-W9dDYh] node validation exception
bootstrap checks failed
max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

image.png

• 解决方法
  • 运行用户的内存使用太小最少262214

  sysctl -w vm.max_map_count=262144  # 临时修改 重启后即失效
  # root用户
  在   /etc/sysctl.conf文件最后添加一行
    vm.max_map_count=262144
  

[WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgumentException: Property [elasticsearch.version] is missing for plugin [head]

• 解决办法
  • 5.x不支持head插件，node作为单独服务器运行，文件放在了elasticsearch的plugins/
  • 移到任意文件下即可。

安装x-pack后head无权访问

修改elasticsearch.yam
增加http.cors.allow-headers: "Authorization,X-Requested-With,Content-Length,Content-Type"
访问域名变为 http://192.168.28.100:9100/?auth_user=elastic&auth_password=123456