elk 安装与所遇问题

系统centos6.7

1，安装jdk-1.8.0

    

1	yum  install  java-1.8.0-openjdk

2，下载elasticsearch-2.4.3.tar.gz并安装

1 2	tar  zxvf elasticsearch-2.4.3. tar .gz -C  /opt vi  /opt/elasticsearch-2 .4.3 /conf/elasticsearch .yml

添加配置

1 2 3

network.host: 0.0.0.0 #server绑定本地服务器内外网ip http.cors.enabled:  true http.cors.allow-origin:  "*"

3，启动

报错

penJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N

Exception in thread "main" java.lang.RuntimeException: don't run elasticsearch as root.

at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:94)

at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:160)

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:45)

Refer to the log for complete error details.

[root@vultr elasticsearch]# su es bin/elasticsearch

OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N

[2016-12-29 08:56:59,510][WARN ][bootstrap                ] unable to install syscall filter: seccomp unavailable: CONFIG_SECCOMP not compiled into kernel, CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER are needed

Exception in thread "main" java.lang.IllegalStateException: Unable to access 'path.plugins' (/opt/elasticsearch/plugins)

Likely root cause: java.nio.file.AccessDeniedException: /opt/elasticsearch/plugins

at sun.nio.fs.UnixException.translateToIOException(UnixException.java:84)

at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)

at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)

at sun.nio.fs.UnixFileSystemProvider.createDirectory(UnixFileSystemProvider.java:384)

at java.nio.file.Files.createDirectory(Files.java:674)

at java.nio.file.Files.createAndCheckIsDirectory(Files.java:781)

at java.nio.file.Files.createDirectories(Files.java:767)

at org.elasticsearch.bootstrap.Security.ensureDirectoryExists(Security.java:337)

at org.elasticsearch.bootstrap.Security.addPath(Security.java:314)

at org.elasticsearch.bootstrap.Security.addFilePermissions(Security.java:246)

at org.elasticsearch.bootstrap.Security.createPermissions(Security.java:212)

at org.elasticsearch.bootstrap.Security.configure(Security.java:118)

at org.elasticsearch.bootstrap.Bootstrap.setupSecurity(Bootstrap.java:212)

at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:183)

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:286)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:45)

Refer to the log for complete error details.

原因：1，新版本不允许用root启动，2，软件目录没相应的权限

解决：

1 2 3

groupadd es useradd  -g es es passwd  es

重新启动：

1 2 3 4 5 6

su  es -c  /opt/elasticsearch-2 .4.3 /bin/elasticsearch  -Xmx2g -Xms2g - Des.index.storage. type =memory –d >  /dev/null  2>&1 &”   #因为我用的是虚拟机，内存比较小，所以启动看实际情况 -Xmx2g 是最大内存 -Xms2g 是最小内存 -d 是后台运行 #我的运行命令是 su  es -c  /opt/elasticsearch/bin/elasticsearch  –d >  /dev/null  2>&1 &

安装插件：elasticsearch-head（是集群前段显示页面）

切换到bin目录下 执行

1	. /plugin  install   mobz /elasticsearch-head

页面展示：http://localhost/_plugin/head

测试：

curl http://localhost:9200 出现一个json 数据表明启动成功，如下

{

    "status": 200,

    "name": "Omen",

    "version": {

        "number": "1.1.1",

        "build_hash": "f1585f096d3f3985e73456debdc1a0745f512bbc",

        "build_timestamp": "2014-04-16T14:27:12Z",

        "build_snapshot": false,

        "lucene_version": "4.7"

    },

    "tagline": "You Know, for Search"

}

安装插件：elasticsearch-kopf

执行命令：

1	. /plugin  install  lmenezes /elasticsearch-kopf

页面展示：http://localhost/_plugin/bigdesk/

4，安装kibana 

1	tar  zxvf kibana-4.6.3-linux-x86_64. tar .gz -C  /opt

修改配置

因为和elasticsearch 在同一台服务器上，所以只需要修改elasticsearch的链接地址

1	elasticsearch_url: http: //localhost :9200

启动

1	bin /kibana  -p 5601 >  /dev/null  2>&1 &

意思是以5601端口启动

然后以http://ip:5601访问就可以了

本文转自wks9751CTO博客，原文链接：http://blog.51cto.com/wks97/1887431 ，如需转载请自行联系原作者