首页 > 系统相关 >CentOS7部署ES(单机)

CentOS7部署ES(单机)

时间：2024-05-13 13:30:25浏览次数：25  
标签：单机 8.11 data CentOS7 elasticsearch ES root localhost

一、创建路径，解压

## 创建路径
[root@localhost /]# cd /data
[root@localhost data]# mkdir ES
## 解压
[root@localhost data]# cd ES
[root@localhost ES]# ls
elasticsearch-8.11.3-linux-x86_64.tar.gz
[root@localhost ES]# tar -zxvf elasticsearch-8.11.3-linux-x86_64.tar.gz 

## 创建数据和日志文件夹
[root@localhost ES]# mkdir /data/ES/elasticsearch-8.11.3/data
[root@localhost ES]# mkdir /data/ES/elasticsearch-8.11.3/log

二、添加用户elsearch

## 新增es用户
[root@localhost ES]# useradd elsearch
## 为es用户设置密码
[root@localhost ES]# passwd elsearch
Changing password for user elsearch.
New password: 
BAD PASSWORD: The password contains the user name in some form
Retype new password: 
passwd: all authentication tokens updated successfully.


## 如果错了，可以删除再加
## userdel -r elsearch

## 将ES目录更改为elsearch用户权限    
[root@localhost ES]# chown elsearch:elsearch /data/ES/ -R

image

三、修改\config\elasticsearch.yml文件

[root@localhost data]# cd /data/ES/elasticsearch-8.11.3/config/
[root@localhost config]# ls
elasticsearch-plugins.example.yml  elasticsearch.yml  jvm.options  jvm.options.d  log4j2.properties  role_mapping.yml  roles.yml  users  users_roles
[root@localhost config]# vim elasticsearch.yml

修改内容

# ======================== Elasticsearch Configuration =========================                                      
#放开node.name，集群模式下，放开cluster.name
node.name: node-1      
# 数据存储和日志存储路径放开注释
path.data: /data/ES/elasticsearch-8.11.3/data                                        
path.logs: /data/ES/elasticsearch-8.11.3/log    
# 设置ip地址，任务网络均可访问
network.host: 0.0.0.0   
# 放开http.port:9200
http.port: 9200                                                                                                                                                                                                                    
# Enable security features    
# 启用或禁用X-Pack安全功能
xpack.security.enabled: false 
xpack.security.enrollment.enabled: true                                                                                                                                                                                                                        
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents  
xpack.security.http.ssl.enabled: true 
xpack.security.http.ssl.keystore.path: certs/http.p12          	                                                                                                                                                                                                              
# Enable encryption and mutual authentication between cluster nodes   
xpack.security.transport.ssl.enabled: true                                                                                  
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: certs/transport.p12
xpack.security.transport.ssl.truststore.path: certs/transport.p12                                                                                                                                                        
cluster.initial_master_nodes: ["node-1"]
## 跨域资源共享设置
http.cors.enabled: true                                                                         
http.cors.allow-origin: "*"                                                              
http.cors.allow-methods: OPTIONS, HEAD, GET, POST, PUT, DELETE                                                                     
http.cors.allow-headers: "X-Requested-With, Content-Type, Content-Length, X-User"                                                                                                                                                    
#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

说明：在Elasticsearch中如果，network.host不是localhost或者127.0.0.1的话，就会认为是生产环境，会对环境的要求比较高，我们的测试环境不一定能够满足，一般情况下需要修改两处配置，如下：
1、修改jvm启动参数jvm.options

[root@kaduoxi config]# vim jvm.options
-Xms128m    #根据自己机器情况修改                                              
-Xmx128m

image
一个进程在VMAs(虚拟内存区域)创建内存映射量最大数量（/etc/sysctl.conf）

[root@kaduoxi config]# vim /etc/sysctl.conf
vm.max_map_count=655360
#配置生效 
[root@kaduoxi config]# sysctl -p

四、启动ES服务

## 切换用户，启动es
[root@localhost config]# su - elsearch
[elsearch@localhost ~]$ cd /data/ES/elasticsearch-8.11.3/bin
[elsearch@localhost bin]$ ./elasticsearch

五、防火墙

#在root用户下关闭防火墙：
#centos6，关闭方式
chkconfig iptables off
#centos7，关闭方式
systemctl stop firewalld.service
## 查看防火墙所有端口
[root@localhost ES]#  firewall-cmd --zone=public --list-ports
## 放开端口6379
[root@localhost ES]#  sudo firewall-cmd --zone=public --add-port=9100/tcp --permanent
success
[root@localhost ES]#  sudo firewall-cmd --zone=public --add-port=9200/tcp --permanent
success
## 刷新防火墙
[root@localhost ES]#  firewall-cmd --reload
success

六、安装elasticsearch-head

[elsearch@kaduoxi bin]$ su - root
Password: 
Last login: Mon Jan  8 15:45:04 CST 2024 on pts/0
[root@kaduoxi ~]# docker pull mobz/elasticsearch-head:5
5: Pulling from mobz/elasticsearch-head
75a822cd7888: Pull complete 
57de64c72267: Pull complete 
4306be1e8943: Pull complete 
871436ab7225: Pull complete 
0110c26a367a: Pull complete 
1f04fe713f1b: Pull complete 
723bac39028e: Pull complete 
7d8cb47f1c60: Pull complete 
7328dcf65c42: Pull complete 
b451f2ccfb9a: Pull complete 
304d5c28a4cf: Pull complete 
4cf804850db1: Pull complete 
Digest: sha256:55a3c82dd4ba776e304b09308411edd85de0dc9719f9d97a2f33baa320223f34
Status: Downloaded newer image for mobz/elasticsearch-head:5
docker.io/mobz/elasticsearch-head:5
[root@kaduoxi ~]# docker create --name elasticsearch-head -p 9100:9100 mobz/elasticsearch-head:5
66e6629b1c465d1d14a04d9ff0a19931b9c220dcbff41439b23b244f686cdcf7
[root@kaduoxi ~]# docker start elasticsearch-head
elasticsearch-head
[root@kaduoxi ~]#

问题

问题1：缺少证书

[2024-03-08T03:38:35,255][ERROR][o.e.b.Elasticsearch      ] [node-1] fatal exception while booting Elasticsearch
org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl] - cannot read configured [PKCS12] keystore (as a truststore) [/itcast/es/elasticsearch-8.11.3/config/certs/transport.p12] because the file does not exist

解决：

 cd /data/ES/elasticsearch-8.11.3/bin
 ## 两次回车
[elsearch@localhost bin]$ ./elasticsearch-certutil ca
## 连续回车
[elsearch@localhost bin]$ /data/ES/elasticsearch-8.11.3/bin/elasticsearch-certutil cert --ca /data/ES/elasticsearch-8.11.3/elastic-stack-ca.p12
## 切换root，config下创建certs文件夹
[root@localhost bin]# mv /data/ES/elasticsearch-8.11.3/elastic-certificates.p12 /data/ES/elasticsearch-8.11.3/config/certs/transport.p12
[root@localhost bin]# cp /data/ES/elasticsearch-8.11.3/config/certs/transport.p12 /data/ES/elasticsearch-8.11.3/config/certs/http.p12
[root@localhost bin]# cd ..
[root@localhost elasticsearch-8.11.3]# chmod -R +755 config/certs/

问题2：配置文件设置

[3] bootstrap checks failed. You must address the points described in the following [3] lines before starting Elasticsearch. For more information see [https://www.elastic.co/guide/en/elasticsearch/reference/8.11/bootstrap-checks.html]bootstrap check failure [1] of [3]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]; for more information see [https://www.elastic.co/guide/en/elasticsearch/reference/8.11/_file_descriptor_check.html]
bootstrap check failure [2] of [3]: max number of threads [3766] for user [elsearch] is too low, increase to at least [4096]; for more information see [https://www.elastic.co/guide/en/elasticsearch/reference/8.11/max-number-threads-check.html]
bootstrap check failure [3] of [3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]; for more information see [https://www.elastic.co/guide/en/elasticsearch/reference/8.11/_maximum_map_count_check.html]
[2024-05-12T20:44:23,381][WARN ][o.e.n.Node               ] [node-1] unexpected exception while waiting for http server to closejava.util.concurrent.ExecutionException: java.lang.IllegalStateException: Can't move to stopped state when not started
        at java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122)
        at java.base/java.util.concurrent.FutureTask.get(FutureTask.java:191)
        at [email protected]/org.elasticsearch.node.Node.prepareForClose(Node.java:1776)
        at [email protected]/org.elasticsearch.bootstrap.Elasticsearch.shutdown(Elasticsearch.java:468)
        at java.base/java.lang.Thread.run(Thread.java:1583)

See logs for more details.

解决：

## max number of threads [3766] for user [elsearch] is too low
参考官网：
https://www.elastic.co/guide/en/elasticsearch/reference/8.11/bootstrap-checks.html
[root@localhost config]# vim /etc/security/limits.conf
# 最大线程数
elsearch       -       nproc       4096
root       -       nproc       4096
[root@localhost config]# sudo systemctl daemon-reload


## 修改max_file_descriptors
[root@localhost config]# vim /etc/security/limits.conf
# 最大文件描述符  配置内容   *表示所有用户生效
* soft nofile 65536
* hard nofile 65536
## 重新登录即可生效
## 可使用命令查看是否生效
[root@localhost ~]# ulimit  -H -n

## 修改max_map_count
[root@kaduoxi config]# vim /etc/sysctl.conf
vm.max_map_count=655360
#配置生效 
[root@kaduoxi config]# sysctl -p

标签：单机,8.11,data,CentOS7,elasticsearch,ES,root,localhost
From： https://www.cnblogs.com/kaduoxi6/p/18189030

相关文章

  • 【运维系列】-- Centos7 防火墙
    一、介绍在centos7中，有几种防火墙共存：firewald,iptables.默认情况下，CentOS是使用firewalld来管理netfilter子系统，不过底层调用的命令仍然是iptables二、firewalld和iptables区别firewalld可以动态修改单挑规则，而不像iptables那样，在修改了规则后必须全部刷新才可以生效......
  • AtCoder Beginner Contest 353
    AtCoderBeginnerContest353abc353_c题意：定义\(F(x,y)\)为\((x+y)mod10^8\)的值,求\(\displaystyle\sum_{i=1}^{N-1}\sum_{j=i+1}^Nf(A_i,A_j).\)思路：对于\(\displaystyle\sum_{i=1}^{N-1}\sum_{j=i+1}^N\f(A_i,A_j).\)来说，每个\(A_i\)的次数都是\(n-1\)次，所以如果没有\(m......
  • HiveSQL
    1.表sublime格式化ctrl+kctrl+f--创建学生表DROPTABLEIFEXISTSstudent_info;createtableifnotexistsstudent_info(stu_idstringCOMMENT'学生id',stu_namestringCOMMENT'学生姓名',birthdaystringCOMMENT'出生日期',......
  • 【pytest】将测试用例内的数据回填给fixtrue 中
    【背景】每个测试用例生成对应的log文件，需要将测试脚本名称传给log对象，生成对于的log文件【分析】方法一：使用@pytest.mark.parametrize的 indirect=True ，参数1：执行对应的函数（fixtrue中的函数名称） 参数2：函数对应的参数  参考：Pytest系列（10）-fixture传参数reques......
  • Dockerfile - build zgrpc-go-professionals:client
     FROM--platform=$BUILDPLATFORMalpineasprotocARGBUILDPLATFORM=linux/amd64TARGETOS=linuxTARGETARCH=amd64#downloadtheprotocbinaryfromgithub#Weunzipthefileinto/usr/local.Noticethatweareextractingboththeprotoc#binary(/bin/pr......
  • Zed——Eslint配置支持Vue
    前言体验下基于Rust的编辑器，看看是不是真的那么快，一个Vue2.0的老项目，其中已经配置好了eslint相应的规则；文档：https://zed.dev/docs/languages/javascript#eslintissue：https://github.com/zed-industries/zed/issues/9934内容配置最开始按着文档来配置，咋搞都没有对Vue.js生......
  • vcenter创建数据中心加入ESXI主机
    vcenter创建数据中心加入ESXI主机 右键选择vcenter主机，点新建数据中心 2、点确定  3、对Datacenter右键，然后选择添加主机 4、添加主机IP地址 5、添加用户密码，然后下一页 6、点是 7、会显示摘要，按下一页 8、分配许可证 9、按是 10、按下一......
  • 第二届黄河流域网络安全技能挑战赛-esay_encrypt
    其他是一题不会啊而且，前200就有奖？这么好？cryptoesay_encrypt手推一遍（字丑勿喷）exp:fromCrypto.Util.numberimport*"""fromsecretimportflagdeff(word,key):out=""foriinrange(len(word)):out+=chr(ord(word[i])^key)re......
  • pytest 学习 - 02 失败重新运行
    前言测试失败后要重新运行n次，要在重新运行之间添加延迟时间，间隔n秒再运行安装：pipinstallpytest-rerunfailures案例importpytestclassTestDemo:deftest_a(self):print("失败用例")assert1==2deftest_b(self):print("成功用......
  • Dockerfile - build zgrpc-go-professionals:server
     FROM--platform=$BUILDPLATFORMalpineasprotocARGBUILDPLATFORM=linux/amd64TARGETOS=linuxTARGETARCH=amd64#downloadtheprotocbinaryfromgithub#Weunzipthefileinto/usr/local.Noticethatweareextractingboththeprotoc#binary(/bin/pr......

赞助商

阅读排行

网站主页关于我们联系我们网站地图

本网站内容转载自其他媒体，侵权联系[admin##ips99.com]。

Copyright © 2020-2023 IPS99 版权所有 IPS99