elk Configuration

docker start

Reference: https://www.elastic.co/guide/en/elasticsearch/reference/5.1/docker.html#docker-cli-run-prod-mode

mac system configuration parameters:

screen ~/Library/Containers/com.docker.docker/Data/com.docker.driver.amd64-linux/tty
# or screen ~/Library/Containers/com.docker.docker/Data/vms/0/tty
# find ~/Library/Containers/com.docker.docker/Data/ -name 'tty'

sysctl -w vm.max_map_count=262144

Exit by Control-A Control-

Delete some container

Add a line yam file

docker-compose -f docker-compose-production.yml down -v  # 同时删除volum

Batch operations

General recommendations are 1000-5000 documents, if your document is very large, may be appropriate to reduce the queue size recommendation is 5-15MB, the default can not exceed 100M

logstash

input file error path.data
delete data / .lock file