安装ES

mkdir /data/software/@H_502_3@tar xvf elasticsearch-6.2.4.tar.gz -C /data/software/@H_502_3@cd /data/software/@H_502_3@ln -sv elasticsearch-6.2.4/ elasticsearch

或者@H_502_3@rpm -ivh elasticsearch-6.2.4.rpm

安装JDK

tar xf jdk-8u172-linux-x64.tar.gz -C /usr/local/@H_502_3@cd /usr/local/@H_502_3@ln -sv jdk1.8.0_172/ jdk

cat /etc/profile.d/java.sh @H_502_3@JAVA_HOME=/usr/local/jdk@H_502_3@PATH=$PATH:$JAVA_HOME/bin@H_502_3@CLASSPATH=.:/usr/local/jdk/lib:/usr/local/jdk/jre/lib

java -version@H_502_3@java version "1.8.0_172"@H_502_3@Java(TM) SE Runtime Environment (build 1.8.0_172-b11)@H_502_3@Java HotSpot(TM) 64-Bit Server VM (build 25.172-b11,mixed mode)@H_502_3@[root@IBG-DB2ES-cwP03 ~]# javac -version@H_502_3@javac 1.8.0_172

根据cpu、内存、磁盘大小配置ES

jvm.options @H_502_3@-Xms2g@H_502_3@-Xmx2g

mkdir /data/elasticsearch/data -p@H_502_3@mkdir /data/elasticsearch/log -p

chown elasticsearch.elasticsearch /data/elasticsearch/ -R

elasticsearch.yml

index.number_of_shards: 5@H_502_3@index.number_of_replicas: 1

discovery.zen.ping_timeout #控制maste@H_502_3@discovery.zen.fd.ping_timeout #结点是否脱离

cluster.name: ES_CLUSTER_TEST

#cluster.routing.allocation.disk.threshold_enabled: true@H_502_3@#cluster.routing.allocation.disk.watermark.low: 8gb@H_502_3@#cluster.routing.allocation.disk.watermark.high: 5gb

node.name: ES-166@H_502_3@node.data: true@H_502_3@node.master: true

path.data: /data/elasticsearch/data@H_502_3@path.logs: /data/elasticsearch/log

bootstrap.memory_lock: true@H_502_3@indices.breaker.total.limit: 70%@H_502_3@indices.breaker.fielddata.limit: 70%@H_502_3@indices.breaker.fielddata.overhead: 1.03@H_502_3@indices.breaker.request.limit: 40%@H_502_3@indices.breaker.request.overhead: 1

network.host: 192.168.1.166

transport.tcp.port: 9300@H_502_3@transport.tcp.compress: true

http.port: 9200@H_502_3@http.max_content_length: 100mb@H_502_3@http.enabled: true@H_502_3@http.cors.enabled: true@H_502_3@http.cors.allow-origin: "*"

discovery.zen.ping.unicast.hosts: [ "192.168.1.163","192.168.1.165","192.168.1.166"]

discovery.zen.minimum_master_nodes: 2@H_502_3@discovery.zen.fd.ping_timeout: 360s@H_502_3@discovery.zen.fd.ping_retries: 60@H_502_3@discovery.zen.fd.ping_interval: 10s@H_502_3@discovery.zen.ping_timeout: 60s

gateway.recover_after_nodes: 1@H_502_3@gateway.recover_after_time: 5m@H_502_3@gateway.expected_nodes: 2

action.destructive_requires_name: false

systemctl daemon-reload@H_502_3@systemctl enable elasticsearch.service@H_502_3@systemctl start elasticsearch.service

vim /etc/sysconfig/elasticsearch@H_502_3@JAVA_HOME=/usr/local/jdk@H_502_3@MAX_OPEN_FILES=65536@H_502_3@MAX_LOCKED_MEMORY=unlimited

/etc/init.d/elasticsearch start

vim /etc/security/limits.conf

elasticsearch soft nofile 655350@H_502_3@elasticsearch hard nofile 655350

elasticsearch soft memlock unlimited@H_502_3@elasticsearch hard memlock unlimited

MAX_LOCKED_MEMORY=unlimited

安装search-guard插件

/usr/share/elasticsearch/bin/elasticsearch-plugin install -b file:///root/search-guard-6-6.2.4-22.3.zip

#!/bin/bash/usr/share/elasticsearch/plugins/search-guard-6/tools/sgadmin.sh -cd /usr/share/elasticsearch/plugins/search-guard-6/sgconfig -cn ES_CLUSTER_TEST -icl --index searchguard -ks /etc/elasticsearch/sgadmin-keystore.jks -ts /etc/elasticsearch/truststore.jks -kspass 12345678 -tspass 12345678 -nhnv -h 192.168.1.165 -p 9300 --diagnose