elasticsearch 集群稳定性配置

1、hosts配置(3个节点同时部署)

vim /etc/hosts

es01 ip1

es02 ip2

es03 ip3

2、三台节点创建启动es的普通用户sre

useradd es08

3、三台节点修改内存参数

echo -e "vm.max_map_count=655350 \nvm.overcommit_memory=1">>/etc/sysctl.conf

sysctl -p

4、三台节点修改limits参数

echo -e "* soft nofile 65536 \n* hard nofile 65536 \n* soft nproc 65536 \n* hard nproc 65536 \n* hard memlock unlimited \n* soft memlock unlimited" >>/etc/security/limits.conf

5、三台节点安装jdk（一般情况下可忽略）

# tar xf jdk-8u231-linux-x64.tar.gz  -C /opt/# echo "export JAVA_HOME=/opt/jdk1.8.0_231" >>/etc/profile# echo "export PATH=\$PATH:\$JAVA_HOME/bin" >>/etc/profile# source /etc/profile

6、es包安装（下载对应的版本可以直接修改版本即可）：

mkdir -r /soft/es815/
cd /soft/es815/
wget  https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.15.0-linux-x86_64.tar.gz

解压es安装包

tar -xzvf elasticsearch-8.15.0-linux-x86_64.tar.gz

7、ik分词器安装：

GitHub - infinilabs/analysis-ik: 🚌 The IK Analysis plugin integrates Lucene IK analyzer into Elasticsearch and OpenSearch, support customized dictionary.

下载合适版本的ik

cd /soft/es815/elasticsearch-8.15.0/plugins

mkdir ik

#将ik分词压缩包解压后的内容放入本文件夹中

8、创建证书

注意： 生成的证书要放在config目录下，否则可能会启动失败。在1台服务器上生成，再同步到另外两台服务器，该证书保持三个es节点一致。

./bin/elasticsearch-certutil ca --pem --out ca.zip --days 36500 -s

将ca.zip加压

将解压后的ca文件夹移动到/soft/es815/elasticsearch-8.15.0/config/下（3台机器都要放入同一个文件夹）

9、创建外部数据目录和日志目录

mkdir -r /soft/es815/es_data

mkdir -r /soft/es815/logs

10、配置文件更新

主节点配置文件

cluster.name: sretest
node.name: es01  #配置各节点hostname
path.data: /soft/es815/es_data
path.logs: /soft/es815/logs
network.host: 本机IP  #配置各节点IP
http.port: 9200
discovery.seed_hosts: ["es01", "es02","es03"]
cluster.initial_master_nodes: ["es01"]
http.cors.enabled: true
http.cors.allow-origin: "*"
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.key: /soft/es815/elasticsearch-8.15.0/config/ca/ca.key   #上一步骤生成的证书
xpack.security.transport.ssl.certificate: /soft/es815/elasticsearch-8.15.0/config/ca/ca.crt

非主节点配置es02：

cluster.name: sretest
node.name: es02  #配置各节点hostname
path.data: /soft/es815/es_data
path.logs: /soft/es815/logs
network.host: 本机IP  #配置各节点IP
http.port: 9200
discovery.seed_hosts: ["es01", "es02","es03"]
cluster.initial_master_nodes: ["es01"]
http.cors.enabled: true
http.cors.allow-origin: "*"
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.key: /soft/es815/elasticsearch-8.15.0/config/ca/ca.key   #上一步骤生成的证书
xpack.security.transport.ssl.certificate: /soft/es815/elasticsearch-8.15.0/config/ca/ca.crt

非主节点配置es03：

cluster.name: sretest
node.name: es03  #配置各节点hostname
path.data: /soft/es815/es_data
path.logs: /soft/es815/logs
network.host: 本机IP  #配置各节点IP
http.port: 9200
discovery.seed_hosts: ["es01", "es02","es03"]
cluster.initial_master_nodes: ["es01"]
http.cors.enabled: true
http.cors.allow-origin: "*"
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.key: /soft/es815/elasticsearch-8.15.0/config/ca/ca.key   #上一步骤生成的证书
xpack.security.transport.ssl.certificate: /soft/es815/elasticsearch-8.15.0/config/ca/ca.crt

11、权限设置：

chown -R es8.es8 /soft/es815

12、linux 系统监控子拉起服务：

创建elasticsearch.service文件

cd /usr/lib/systemd/system
sudo vi elasticsearch.service

[Unit]
Description=elasticsearch
After=network.target
 
[Service]
Type=simple
User=es
Group=es
LimitNOFILE=100000
LimitNPROC=100000
LimitMEMLOCK=infinity
Restart=on-failure
RestartSec=10s
ExecStart=/opt/es/elasticsearch-7.9.0/bin/elasticsearch
PrivateTmp=true
 
[Install]
WantedBy=multi-user.target

2 重新加载elasticseach.service，每次改完之后重新加载

sudo systemctl daemon-reload
4 开启elasticsearch服务

sudo systemctl enable elasticsearch.service
5 elasticsearch服务管理

#启动
sudo systemctl start elasticsearch.service
#停止
sudo systemctl stop elasticsearch.service
#重启
sudo systemctl restart elasticsearch.service
#查看状态
systemctl status elasticsearch.service

原文链接：https://blog.youkuaiyun.com/m0_37566009/article/details/121760811

13、密码设置：

./bin/elasticsearch-setup-passwords interactive

 14、验证：

curl -u "elastic:Sre@202308"  http://IP:9200/_cat/nodes