一、es部署
1、关闭防火墙
systemctl stop firewalld && systemctl disable firewalld
2、优化内核参数：vim /etc/security/limits.conf
* -nofile 65535
* soft memlock unlimited
* hard memlock unlimited
elasticsearch soft memlock unlimited
elasticsearch hard memlock unlimited
* soft nproc 1024000
* hard nproc 1024000
* hard nofile 65536
* soft nofile 65536
禁用swappiness，防止vm在内存中的数据缓存到磁盘中，从而影响性能
永久修改
echo "vm.swappiness = 1" >> /etc/sysctl.conf
es默认情况下为64为的 linux 操作系统使用mmapfs进行索引的存储,默认情况下,操作系统的 mmap 数量较低,可能导致内存异常.可配置文件
echo "vm.max_map_count=262144" >> /etc/sysctl.conf
#刷新
sysctl -p
3、新增elasticsearch用户组和用户，安装es
groupadd elasticsearch && useradd -g elasticsearch elasticsearch && passwd elasticsearch
mkdir /data
mv kibana-7.6.0-linux-x86_64.tar.gz /data
mv elasticsearch-7.6.0.tar.gz /data
chown -R elasticsearch:elasticsearch /data
su - elasticsearch
cd /data
tar -zxf elasticsearch-7.6.0.tar.gz
4、修改配置文件：
cat <<EOF > /data/elasticsearch-7.6.0/config/elasticsearch.yml
cluster.name: my-application
node.name: node-1
path.data: /data/elasticsearch-7.6.0/data
path.logs: /data/elasticsearch-7.6.0//logs
network.host: 192.168.203.155
http.port: 9200
discovery.seed_hosts: ["host1"]
cluster.initial_master_nodes: ["node-1"]
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
EOF
5、切换用户生成证书文件（设置密码用）
cd /data/elasticsearch-7.6.0/bin
./elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""
6、启动 elasticsearch手动设置密码
cd /data/elasticsearch-7.6.0/bin
#启动不了报错可能需要做系统优化，检查内存太小，服务器资源
./elasticsearch -d
#查看进程是否启动
ps -ef | grep elastic
#设置密码
./elasticsearch-setup-passwords interactive
二、kibana部署
cd /data && tar -zxf kibana-7.6.0-linux-x86_64.tar.gz
kibana目录下的config/kibana.yml配置相关参数:
vim /data/kibana-7.6.0-linux-x86_64/config/kibana.yml
server.port: 5601
server.host: "192.168.203.155"
elasticsearch.hosts: ["http://192.168.203.155:9200"]
elasticsearch.username: "elastic"
elasticsearch.password: "elastic"
18n.locale: "zh-CN"
启动Kibana
#root账号启动
./kibana --allow-root
#root账号后台启动
nohup ./kibana --allow-root &
#其他账号启动
./kibana
#其他账号后台启动
nohup ./kibana &
