rpm -ivh jdk-17.0.4.1_linux-x64_bin.rpm
groupadd es && useradd -d /home/es -g es es
tar -xzvf elasticsearch-8.5.2-linux-x86_64.tar.gz
ln -s elasticsearch-8.5.2 elasticsearch
chown -R es:es elasticsearch elasticsearch-8.5.2
修改最大句柄数：
vi /etc/sysctl.conf
添加：vm.max_map_count=320000
执行: sysctl -p
不要用root启动，切换至es， 启动
提示transport.p12
删除data，用es用户重新启动
关闭地图更新：
ingest.geoip.downloader.enabled: false
关闭安全校验：
xpack.security.enabled: false
xpack.security.enrollment.enabled: false
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
enabled: false
keystore.path: certs/http.p12
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
enabled: false
verification_mode: certificate
keystore.path: certs/transport.p12
truststore.path: certs/transport.p12