ElasticSearch的安装与基本概念

#创建elsearch用户，Elasticsearch不支持root用户运行 
useradd elsearch
 
#解压安装包 
tar -xvf elasticsearch-8.3.3-linux-x86_64.tar.gz -C es/
 
#修改配置文件 
vim conf/elasticsearch.yml 
network.host: 0.0.0.0 #设置ip地址，任意网络均可访问
 
#说明：在Elasticsearch中如果，network.host不是localhost或者127.0.0.1的话，就会认为是生产环境， 会对环境的要求比较高，我们的测试环境不一定能够满足，一般情况下需要修改2处配置，如下： 
#1：修改jvm启动参数 
vim conf/jvm.options 
-Xms128m  #根据自己机器情况修改 
-Xmx128m 
#2：一个进程在VMAs(虚拟内存区域)创建内存映射最大数量 
vim /etc/sysctl.conf 
vm.max_map_count=655360 
sysctl -p #配置生效
 
#启动ES服务 
su - elsearch 
cd bin 
./elasticsearch 或 ./elasticsearch -d #后台启动
 
#通过访问进行测试，看到如下信息，就说明ES启动成功了
 
{
	"name": "dSQV6I8",
	"cluster_name": "elasticsearch",
	"cluster_uuid": "v5GPTWAtT5emxFdjigFg-w",
	"version": {
		"number": "6.5.4",
		"build_flavor": "default",
		"build_type": "tar",
		"build_hash": "d2ef93d",
		"build_date": "2018-12-17T21:17:40.758843Z",
		"build_snapshot": false,
		"lucene_version": "7.5.0",
		"minimum_wire_compatibility_version": "5.6.0",
		"minimum_index_compatibility_version": "5.0.0"
	},
	"tagline": "You Know, for Search"
}
 
 
#停止服务 
root@itcast:~# jps 
68709 Jps 
68072 Elasticsearch 
 
kill 68072 #通过kill结束进程

#启动出错，环境：Centos6 
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536] 
#解决：切换到root用户，编辑limits.conf 添加类似如下内容 
vi /etc/security/limits.conf
 
 
添加如下内容: 
* soft nofile 65536 
* hard nofile 131072 
* soft nproc 2048 
* hard nproc 4096
 
 
[2]: max number of threads [1024] for user [elsearch] is too low, increase to at least [4096] 
#解决：切换到root用户，进入limits.d目录下修改配置文件。 
vi /etc/security/limits.d/90-nproc.conf 
#修改如下内容： 
* soft nproc 1024 
#修改为 
* soft nproc 4096
 
 
[3]: system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk 
#解决：Centos6不支持SecComp，而ES5.2.0默认bootstrap.system_call_filter为true 
vim config/elasticsearch.yml 
添加： 
bootstrap.system_call_filter: false

#拉取镜像 
docker pull mobz/elasticsearch-head:5 
 
#创建容器 
docker create --name elasticsearch-head -p 9100:9100 mobz/elasticsearch-head:5 
 
#启动容器 
docker start elasticsearch-head