ELK node installation

 

 

setenforce 0
sed -i s/enforcing/disabled/g /etc/selinux/config

yum install java-1.8.0* -y

cd /usr/local/src
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.0.1-linux-x86_64.tar.gz
tar zxf elasticsearch-7.0.1-linux-x86_64.tar.gz
mv elasticsearch-7.0.1 /usr/local/

Elasticsearch configuration /usr/local/elasticsearch-7.0.1/config/elasticsearch.yml

path.data: /usr/local/elasticsearch-7.0.1/data
path.logs: /usr/local/elasticsearch-7.0.1/logs
network.host: 127.0.0.1
http.port: 9200


JVM memory limit change /usr/local/elasticsearch-7.0.1/config/jvm.options
-Xms128m
-Xms128m

 

Elasticsearch start, starting a normal user to start

1. useradd -s /sbin/nologin elk
2. chown -R elk:elk /usr/local/elasticsearch-7.0.1/
3. su - elk -s /bin/bash
4. /usr/local/elasticsearch-7.0.1/bin/elasticsearch -d

 

Verify the success of start
1. Check the log
tail -30f /usr/local/elasticsearch-7.0.1/logs/elasticsearch.log
2. View -lpnt port netstat
3. Open the Web page to see kibana

 

1) The maximum number of open files adjustment /etc/security/limits.conf
* - nofile 65536

2) The maximum number of open processes adjustment /etc/security/limits.d/XX-nproc.conf (XX different machines is not the same, you can view the first-cd /etc/security/limits.d/)


* soft nproc unlimited
root soft nproc unlimited

 

3) adjusting kernel parameters
/etc/sysctl.conf

vm.max_map_count = 262144

4) elasticsearch.yml file node.name: node 1-open the #


Elsticsearch monitor card recommended

1. If the study recommends that listens 127.0.0.1
2. If the cloud server, must take the 9200 and 9300 public entrance security groups restrictions about
the environment, including network card 3. recommend listening online, easy listening in the public network invade

Guess you like

Origin www.cnblogs.com/faberbeta/p/elk001.html