本篇內(nèi)容介紹了“ELK集群的搭建以及Elasticsearchd api的簡(jiǎn)單使用”的有關(guān)知識(shí)，在實(shí)際案例的操作過(guò)程中，不少人都會(huì)遇到這樣的困境，接下來(lái)就讓小編帶領(lǐng)大家學(xué)習(xí)一下如何處理這些情況吧！希望大家仔細(xì)閱讀，能夠?qū)W有所成！
創(chuàng)新互聯(lián)網(wǎng)站建設(shè)服務(wù)商，為中小企業(yè)提供成都網(wǎng)站設(shè)計(jì)、成都網(wǎng)站制作服務(wù)，網(wǎng)站設(shè)計(jì)，網(wǎng)站改版維護(hù)等一站式綜合服務(wù)型公司，專業(yè)打造企業(yè)形象網(wǎng)站，讓您在眾多競(jìng)爭(zhēng)對(duì)手中脫穎而出創(chuàng)新互聯(lián)。
Elasticsearchd的安裝，具體的安裝步驟很簡(jiǎn)單不過(guò)有些配置還是需要注意的，下面簡(jiǎn)單介紹下安裝步驟
第一步：從官網(wǎng)下載最新的版本：elasticsearch-5.4.1_1，安裝前先安裝jdk8,elasticsearch是java開(kāi)發(fā)的，解壓到你想放的位置：修改配置文件，配置文件的位置：/usr/local/elasticsearch-5.4.1_1/config/elasticsearch.yml,因?yàn)闉榱税踩玡lasticsearch不能用root用戶啟動(dòng)，需要從新建立新的用戶，并且給文件夾賦值權(quán)限給新用戶，例如用戶名叫elasticsearch,在root用戶下chown -R elasticsearch:elasticsearch /usr/local/elasticsearch-5.4.1_1然后修改一下系統(tǒng)的參數(shù)：
a.添加 /etc/security/limits.conf
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096
b./etc/security/limits.d/90-nproc.conf
把soft nproc 1024這行的1024改大就行了。
c.vi /etc/sysctl.conf
添加下面配置：
vm.max_map_count=262144
d.并執(zhí)行命令：
sysctl -p
E.修改elasticsearch.yml
cluster.name: es_test_1 bootstrap.memory_lock: false bootstrap.system_call_filter: false node.name: esc_test_node_1 http.enabled: true node.master: true node.data: true // 文件的位置 path.logs: /path/to/logs // 日志的位置 path.logs: /home/data/elasticsearch/log/ //這個(gè)要設(shè)置下不然外網(wǎng)無(wú)法訪問(wèn) network.host: 193.168.6.87 http.port: 9201 transport.tcp.port: 9301 http.cors.enabled: true http.cors.allow-origin: /.*/ http.cors.allow-credentials: true // 這個(gè)是集群的配置單機(jī)不需要配置 discovery.zen.ping.unicast.hosts: ["x.x.x.x"] // 2個(gè)節(jié)點(diǎn) node.max_local_storage_nodes: 2
bin目錄啟動(dòng)服務(wù)：./elasticsearch -d，看日志/home/data/elasticsearch/log/，如果日志正常就說(shuō)明啟動(dòng)成功
常見(jiàn)錯(cuò)誤
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:84) ~[elasticsearch-5.4.1.jar:5.4.1] Caused by: java.lang.RuntimeException: can not run elasticsearch as root at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:106) ~[elasticsearch-5.4.1.jar:5.4.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:194) ~[elasticsearch-5.4.1.jar:5.4.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:350) ~[elasticsearch-5.4.1.jar:5.4.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:123) ~[elasticsearch-5.4.1.jar:5.4.
正常啟動(dòng)日志：
重慶分公司
重慶分公司
[2017-08-20T15:56:07,031][INFO ][o.e.n.Node ] [esc_test_node_1] JVM arguments [-Xms512m, -Xmx512m, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+DisableExplicitGC, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -Djdk.io.permissionsUseCanonicalPath=true, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j.skipJansi=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.path.home=/usr/local/elasticsearch-5.4.1_1]
[2017-08-20T15:56:07,889][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [aggs-matrix-stats]
[2017-08-20T15:56:07,889][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [ingest-common]
[2017-08-20T15:56:07,889][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [lang-expression]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [lang-groovy]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [lang-mustache]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [lang-painless]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [percolator]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [reindex]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [transport-netty3]
[2017-08-20T15:56:07,890][INFO ][o.e.p.PluginsService ] [esc_test_node_1] loaded module [transport-netty4]
[2017-08-20T15:56:07,891][INFO ][o.e.p.PluginsService ] [esc_test_node_1] no plugins loaded
[2017-08-20T15:56:09,451][INFO ][o.e.d.DiscoveryModule ] [esc_test_node_1] using discovery type [zen]
[2017-08-20T15:56:10,205][INFO ][o.e.n.Node ] [esc_test_node_1] initialized
[2017-08-20T15:56:10,205][INFO ][o.e.n.Node ] [esc_test_node_1] starting ...
[2017-08-20T15:56:10,387][INFO ][o.e.t.TransportService ] [esc_test_node_1] publish_address {192.168.6.87:9300}, bound_addresses {192.168.6.87:9300}
[2017-08-20T15:56:10,394][INFO ][o.e.b.BootstrapChecks ] [esc_test_node_1] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
[2017-08-20T15:56:13,446][INFO ][o.e.c.s.ClusterService ] [esc_test_node_1] new_master {esc_test_node_1}{xSFrf7feRD25YuwgtBeSLw}{G4byr3dMRc6T1QN_PRxxDQ}{192.168.6.87}{192.168.6.87:9300}, reason: zen-disco-elected-as-master ([0] nodes joined)
[2017-08-20T15:56:13,465][INFO ][o.e.h.n.Netty4HttpServerTransport] [esc_test_node_1] publish_address {192.168.6.87:9200}, bound_addresses {192.168.6.87:9200}
[2017-08-20T15:56:13,468][INFO ][o.e.n.Node ] [esc_test_node_1] started
[2017-08-20T15:56:14,573][INFO ][o.e.g.GatewayService ] [esc_test_node_1] recovered [11] indices into cluster_state第二步:安裝logstash，這個(gè)安裝很簡(jiǎn)單，從官網(wǎng)下載最新的版本解壓
創(chuàng)建一個(gè)輸入輸出文件sample.conf
input {
stdin {}
}
output {
elasticsearch {
hosts => ["192.168.6.87:9201"] }
stdout {
codec => rubydebug }
}啟動(dòng)服務(wù)：
第三步安裝kibana-5.1.1-linux-x86_64，修改配置文件/usr/local/kibana-5.1.1-linux-x86_64/config/kibana.yml,修改一下server.host: "192.168.x"，不然無(wú)法訪問(wèn)的通過(guò)外網(wǎng)，啟動(dòng)服務(wù)
[root@localhost bin]# ./kibana log [08:09:06.517] [info][status][plugin:kibana@5.1.1] Status changed from uninitialized to green - Ready log [08:09:06.593] [info][status][plugin:elasticsearch@5.1.1] Status changed from uninitialized to yellow - Waiting for Elasticsearch log [08:09:06.625] [info][status][plugin:console@5.1.1] Status changed from uninitialized to green - Ready log [08:09:06.648] [warning] You're running Kibana 5.1.1 with some different versions of Elasticsearch. Update Kibana or Elasticsearch to the same version to prevent compatibility issues: v5.4.1 @ 192.168.6.87:9200 (192.168.6.87) log [08:09:06.657] [error][status][plugin:elasticsearch@5.1.1] Status changed from yellow to red - Elasticsearch is still initializing the kibana index. log [08:09:06.865] [info][status][plugin:timelion@5.1.1] Status changed from uninitialized to green - Ready log [08:09:06.871] [info][listening] Server running at http://192.168.6.87:5601 log [08:09:06.872] [error][status][ui settings] Status changed from uninitialized to red - Elasticsearch plugin is red
瀏覽器里打開(kāi)kibana,然后輸入“星兒”
Elasticsearchd的使用實(shí)際很簡(jiǎn)單的，一切都是resful，用postman簡(jiǎn)單的做個(gè)例子，插入一條消息到elsearch中
可以獲取的到
“ELK集群的搭建以及Elasticsearchd api的簡(jiǎn)單使用”的內(nèi)容就介紹到這里了，感謝大家的閱讀。如果想了解更多行業(yè)相關(guān)的知識(shí)可以關(guān)注創(chuàng)新互聯(lián)網(wǎng)站，小編將為大家輸出更多高質(zhì)量的實(shí)用文章！
