elasticsearch8版本安装详细步骤，单节点，多节点，冷热温集群部署、IK分词器安装、简单生产安全模式配置

admin

elasticsearch8版本安装详细步骤，单节点，多节点，冷热温集群部署、IK分词器安装、简单生产安全模式配置

- X2 Z0 f% K  P1、设置虚拟内存
sysctl -w vm.max_map_count=262144
echo "vm.max_map_count=262144" >> /etc/sysctl.conf，
echo "vm.max_map_count = 262144" >> /etc/sysctl.conf
, Y+ I5 F  ?5 U4 G  a" r  r. q# ?

加入：vm.max_map_count=262144
; W# r; ^2 D1 b4 Y使配置生效：sysctl -p
9 f$ o0 a0 i  n. j3 z8 ?  [
2、设置文件打开数：
cat >>/etc/security/limits.conf<<EOF
9 I8 y. F; \& c; z/ {# N0 W2 { * soft nofile 65535
* hard nofile 65535
* soft nproc 65535
* hard nproc 65535
EOF

: G& L8 e' ^3 ~" [
设置pam配置：
' c$ w4 e! Z! N4 F! t. f2 R5 N) Oecho "session    required pam_limits.so" >> /etc/pam.d/login
3 X8 J7 X. O* g
7 C9 i: g9 }) O, f" [
1 j/ p* u+ z& G9 [: Q4 V3、禁用swap交换分区
swapoff -a                #临时禁用
vi /etc/fstab        #永久禁用
. @4 V5 E/ G1 L0 C7 ?9 _找到swap这一行前面使用#符号禁用掉
' y: v) e: k4 b4 e3 w
/ w. W8 o, O. ^, @) V9 ~7 a4、设置TCP重传超时
sysctl -w net.ipv4.tcp_retries2=5
编辑配置文件：echo "net.ipv4.tcp_retries2 = 5" >> /etc/sysctl.conf

5、创建一个用户
useradd es

6、创建安装目录
. R% d5 J7 O4 dmkdir /data/elasticsearch/
8 q9 y) Z2 L) \! E; _. i6 pmkdir /data/elasticsearch/elastic-cluster1
0 J- Y9 |+ ^! r7 t! A" i
mkdir /data/elasticsearch/elastic-cluster2
  G) _) M. Q0 q' Q: r, l, Y
  e# _# r  |) W2 `" p+ x5 U6 g
" M9 K* r/ g4 q' }7 M. {
9 g: y9 E6 D! r4 F& c/ |[root@it-elassearch ~]# ls -p /data/elasticsearch
, k+ ^/ c; P4 w* m2 e8 @# Melastic-cluster1/  elastic-cluster2/

4 U. z1 Z+ o+ I$ {6 v7 W, m# R

7、下载官网安装包
官网下载地址，选择对应版本的elasticsearch和kibana：https://www.elastic.co/cn/downloads/past-releases#elasticsearch
https://www.elastic.co/cn/downloads/past-releases#elasticsearch
. t0 X4 u- S+ Z5 s" l
; {* k. ?2 g6 g! g, i
7.1 解压：我的安装包下载到了/root/目录下，解压到/elasticsearch/elastic-cluster1/目录下


[root@it-elassearch-2 ~]# ls
$ w( X6 l8 @' x# F  k6 Gelasticsearch-8.15.0-linux-x86_64.tar.gz  qemu-guest-agent-1.5.3-ksyun.x86_64.rpm  sudo-1.9.5-3.el7.x86_64.rpm
2 j- Z, K' H3 @) vYou have new mail in /var/spool/mail/root


/ `  D7 Z- h  b/ K7 q2 v[root@it-elassearch ~]# tar -zxvf elasticsearch-8.15.0-linux-x86_64.tar.gz -C /data/elasticsearch/elastic-cluster1/


[root@it-elassearch-1 ~]# tar -zxvf elasticsearch-8.15.0-linux-x86_64.tar.gz
......

8 B4 ?  f+ d$ M* f: [elasticsearch-8.15.0/modules/analysis-common/analysis-common-8.15.0.jar
elasticsearch-8.15.0/modules/aggregations/
% y& r+ @8 \  D6 x2 K. Y/ f! a0 Celasticsearch-8.15.0/modules/aggregations/plugin-descriptor.properties
1 ~- ^6 Z3 \: L1 N8 y$ lelasticsearch-8.15.0/modules/aggregations/aggregations-8.15.0.jar
! F, ]  S  w+ J, I" `  R! felasticsearch-8.15.0/config/jvm.options.d/
elasticsearch-8.15.0/plugins/
( E% `  K) ?9 m4 Selasticsearch-8.15.0/logs/

+ l/ D3 J! M. s& Z) T
" O/ T4 b9 q6 U进入对应目录下：cd /elasticsearch/elastic-cluster1
8 y- k5 N9 y, l+ m& h( l
" g9 y6 q" F4 E配置es参数文件：
( v0 D( }! P# r. \1 I  A  w! E+ }
. X+ H# Z  ~* F9 E- e节点一配置：
' B6 S- W0 A! {% Y* I: G$ h#vim elasticsearch-8.15.0/config/elasticsearch.yml

cluster.name: essearch
5 G7 s/ _3 k. d% T0 E8 knode.name: it-elassearch
3 y' f3 J' j1 U3 @' o) X: \" H3 y# apath.data:  /data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/data
' i2 `! R, E: d( Z, m- ]path.logs: /data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/logs
network.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["172.24.110.125", "172.24.110.126"]
+ J: H' F$ i5 C$ mcluster.initial_master_nodes: ["it-elassearch", "it-elassearch-2"]
2 X4 @# I1 ?, @% v5 |8 F6 T#node.master: true
#node.data: true
8 a0 C6 k( U. B
xpack.security.transport.ssl.enabled: false
3 q7 r0 @2 K; S# a: Yxpack.security.enabled: false

节点二配置
#vim elasticsearch-8.15.0/config/elasticsearch.yml
( k, i/ k; I- K& m& i
- F9 f/ F0 F9 Y( a) G0 r( G$ }& d9 vcluster.name: essearch
: C$ G5 _0 t$ Inode.name: it-elassearch-2
path.data: /data/elasticsearch/elastic-cluster2/elasticsearch-8.15.0/data
5 S, S- ~6 Q2 F  tpath.logs: /data/elasticsearch/elastic-cluster2/elasticsearch-8.15.0/logs
1 l+ t" i9 n( d8 Gnetwork.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["172.24.110.125", "172.24.110.126"]
cluster.initial_master_nodes: ["it-elassearch", "it-elassearch-2"]
#node.master: true
#node.data: true

xpack.security.transport.ssl.enabled: false
xpack.security.enabled: false
; w9 x  I+ A5 ~" q" n) F6 \; @
JVM堆内存大小设置
2 X) a9 ?: m' N设置内存大小：

; D4 l* ~3 c* h! }, Y* R' z
, p5 ^2 H4 C$ D( |( i: g' m. Z# J/ y
# Z! A: c$ Z) k4 j" s. Svim elasticsearch-8.15.0/config/jvm.options

3 G# n2 E' ^# M! v: {" Y3 V
' u% ~  R$ ^( ?" V2 p-Xms4g
-Xmx4g
( b9 a" A1 U* V$ u, P$ J) X+ C
8 @7 W. O3 ]3 g& G* T
! Q! t: W" f1 \3 O实际业务线上环境，建议所有Elasticsearch节点都是独立节点，不要部署其他程序、其他后台进程，以提高性能。如果内存足够大，比如：128GB、256GB，单节点是浪费，建议通过虚拟化方式切分开。



解释：
0 }6 P4 z6 D+ `' f  w( @+ H
目录结构
2 P: P: i" n! g. c! E( w* jType        Description        Default Location        Setting
. j" e) y% J  _% Zhome        Elasticsearch 主目录或 $ES_HOME        Directory created by unpacking the archive        
bin        二进制脚本，包括用于启动节点的 elasticsearch 和用于安装插件的 elasticsearch-plugin        $ES_HOME/bin        
8 w! x' ~# l3 Nconf        配置文件，包括但不限于elasticsearch.yml        $ES_HOME/config        ES_PATH_CONF
conf        为传输层和 HTTP 层生成 TLS 密钥和证书        $ES_HOME/config/certs        
/ s* I& @6 K* ^" \data        节点上分配的每个索引/分片的数据文件的位置        $ES_HOME/data        path.data
6 g5 ^4 n$ X/ f1 y% ?" s4 j% O0 I  hlogs        日志文件位置        $ES_HOME/logs        path.logs
plugins        插件文件位置。每个插件将包含在一个子目录中        $ES_HOME/plugins        
repo        共享文件系统存储库位置。可以容纳多个位置。文件系统存储库可以放置在此处指定的任何目录的任何子目录中        Not configured        path.repo

7 c4 }! a1 A( K  O' R0 o7 a解释：
: x8 Y) Y0 \" B! B2 Z+ v: D& L
) y; V) H; g. ^% B集群名称设置：cluster.name:
节点名称：node.name:
网络主机设置：network.host:
发现形成集群：discovery.seed_hosts:
选举主节点master资格的节点：cluster.initial_master_nodes:
设置集群间通信端口：transport.port:
设置数据存放位置：path.data:
6 T8 b4 s; K2 ]设置日志存放位置：path.logs:

" f2 c; h5 Z6 V- m其他y

( ^/ D" j% E  X: u; h3 c8 o9 N* U  pcluster.name: CollectorDBCluster
path.data:/data/elasticsearch/data
path.logs: /data/cusc-logs
network.host: 10.153.61.71
http.pち中o砗rt: 9200
node.name:node-1
  H3 ^( J, f" W5 f* G0 K7 hcluster.initial master nodes: ["node-1”1
8 |( T2 I# A+ g+ p' S( |% c各配置项含义:
cluster.name 集群名称，各节点配成相同的集群名称。
% p+ C/ \, I1 S5 X, Fnode.name 节点名称，各节点配置不同。
- U7 B# i; G; R; `6 Inode.master 指示某个节点是否符合成为主节点的条件。
node.data 指示节点是否为数据节点。数据节点包含并管理索引的一部分,
path.data 数据存储目录。
path.logs 日志存储目录。
. R7 P2 h6 l6 d7 L: N& ibootstrap.memory lock 内存锁定，是否禁用交换
  P( n1 o% r+ }) v+ v5 }8 _9 gbootstrap.system call filter 系统调用过滤器。
, v( p1 j( {' S, N) cnetwork.host 绑定节点IP。
http.port 端囗。


5 S+ {" ^  \, E. z. O
[root@it-elassearch-2 ~]# tar -zxvf elasticsearch-8.15.0-linux-x86_64.tar.gz  -C /data/elasticsearch/elastic-cluster2/
" C; R2 u9 _+ a- A' K


- L+ t9 l! `7 b. R启动集群：

% g+ [8 j# n8 S2 K前提：设置好系统配置和JVM堆内存
& l9 W8 o2 u" C7 A. |+ ^
创建elastic的数据和日志存放目录，如果是测试环境无所谓，如果是生成环境一定要单独设置数据和日志存放的路径，因为ES可能因为升级或其它原因把原有的数据清理或丢失等因素

+ l8 w* v  V* t; O8 T
4 H+ f7 b% w5 F6 [5 K
mkdir /data/elasticsearch/elastic-cluster2/elasticsearch-8.15.0/data
mkdir /data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/data
' p0 ~* L% B5 k- J8 F; Z

! R: E( \% K3 [1 }8 p配置文件属组权限，并启动
3 n1 }. Y4 [& `7 @4 e* ]1 m( G* P[root@it-elassearch elasticsearch]# chown -R es:es elastic-cluster1/
: ]$ k% Y7 b9 a. c8 E7 _: l[root@it-elassearch-2 elasticsearch]# chown -R es:es elastic-cluster2/



9 g* t+ v- W3 z- \* f/ Z! A; H/ S如果添加鉴权配置请按照此处配置，不配置即可略过：

8 n  H( G; x# l* G; h: W
" ]: {0 ]- S" b7 w/ N) M. F, I2 _  @生成密匙：
" q/ [: |7 N8 C[es@it-elassearch elasticsearch-8.15.0]$ ./bin/elasticsearch-certutil ca
1 F, B. R! D( w! _This tool assists you in the generation of X.509 certificates and certificate
signing requests for use with SSL/TLS in the Elastic stack.
* v' ~0 E- `# J

+ f4 m; d4 [, A4 ?The 'ca' mode generates a new 'certificate authority'
0 H& q/ w* f0 L% |% AThis will create a new X.509 certificate and private key that can be used
3 o( _6 S1 F* D" V# oto sign certificate when running in 'cert' mode.

! W3 F7 ]+ x& o/ |" F' i# {+ f
+ ^7 S% t4 B7 v: ^Use the 'ca-dn' option if you wish to configure the 'distinguished name'
of the certificate authority


$ j$ c# @* x' z! N: u# ~- CBy default the 'ca' mode produces a single PKCS#12 output file which holds:
    * The CA certificate
    * The CA's private key
/ A( J, O- M0 R- S0 v. t
, u7 h7 w8 u1 `& T# ]) E4 ^' F
  y# E; v# B" X+ ~6 o$ nIf you elect to generate PEM format certificates (the -pem option), then the output will
4 x1 D6 {. L. m& ]0 Q. Sbe a zip file containing individual files for the CA certificate and private key

, P+ z$ @5 g7 `6 D' \5 d
( ~* o) B! ^1 D7 t0 `9 nPlease enter the desired output file [elastic-stack-ca.p12]:
Enter password for elastic-stack-ca.p12 :

. \1 P/ z3 Q  c; G, c
: Z  S6 D: ?5 N& h# b

' G" e) S! i. ^3 U- u1 ]6 f
  G! t: O2 N- Y# d( e8 C/ a[es@it-elassearch-2 elasticsearch-8.15.0]$ ./bin/elasticsearch-certutil ca
& u% u; c. w* y* }1 A! tThis tool assists you in the generation of X.509 certificates and certificate
8 R1 ^( }9 Z3 o, s8 U, }, Usigning requests for use with SSL/TLS in the Elastic stack.
' h/ V/ j  M- T

The 'ca' mode generates a new 'certificate authority'
" V( P. T* \) o6 `! yThis will create a new X.509 certificate and private key that can be used
to sign certificate when running in 'cert' mode.


Use the 'ca-dn' option if you wish to configure the 'distinguished name'
( z6 o8 l4 t* X4 Uof the certificate authority

+ o6 {8 j! y' i& e
By default the 'ca' mode produces a single PKCS#12 output file which holds:
    * The CA certificate
7 M5 @! y$ h  B- X    * The CA's private key
  _, R, M1 b0 l! ]! D6 C

If you elect to generate PEM format certificates (the -pem option), then the output will
be a zip file containing individual files for the CA certificate and private key


* [- {+ F* o' @5 s. R: o& x3 |1 H: fPlease enter the desired output file [elastic-stack-ca.p12]:
Enter password for elastic-stack-ca.p12 :
* }$ M$ U7 ^, ?$ O, r
5 X2 m' L) N7 w/ M. G







4 J+ v- Y  W7 l4 j) z2 I
mkdir -p ./config/certificates/
5 {1 q1 b5 v4 u0 F+ y' Y7 m
" {( Z6 B) O7 j8 R; o


http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-headers: Authorization,X-Requested-With,Content-Type,Content-Length


7 |1 P# |8 \# U3 Vxpack.security.enabled: true
xpack.security.authc.accept_default_password: true
9 V. F1 p0 L) [3 g0 `xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /config/certificates/elastic-certificates.p12
" m8 ^. H# I7 f  O: Mxpack.security.transport.ssl.truststore.path: /config/certificates/elastic-certificates.p12
: f% J, J3 H0 H. _# J

, y. U& ]) f5 @- [7 l
1 K" i, H( R4 i, @6 c/ W$ X

$ n- M- b( k6 v/ K- M$ [# G
' ^2 g- Q" @2 r+ W+ W3 U1 e加权一样需要切换到es账号：

6 N( s$ @" e$ F. ^1 H0 G. n1 ]: {在各个节点上添加密码：
0 z  b; Z. Z; s, f1 z& ~* h  C
[es@it-elassearch elasticsearch-8.15.0]$ ./bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
[es@it-elassearch elasticsearch-8.15.0]$ ./bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
% c% a% o) g  t' g# oEnter value for xpack.security.transport.ssl.keystore.secure_password:
. e, k( ^- J* h* ^8 O6 w! f
! f$ i( G2 x1 n) u! q
[es@it-elassearch-2 elasticsearch-8.15.0]$ ./bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
) F* P$ V( N. }0 wEnter value for xpack.security.transport.ssl.keystore.secure_password:
输入密码：第一次输入密码

9 |  g5 B. c: T% e! J& B, R[es@it-elassearch elasticsearch-8.15.0]$ ./bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password
Enter value for xpack.security.transport.ssl.truststore.secure_password:
8 e: T: ^2 s+ A& j" c
: t, t2 O/ J8 @+ ~[es@it-elassearch-2 elasticsearch-8.15.0]$ ./bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password
' ^& Z( r% E: L& Y# `Enter value for xpack.security.transport.ssl.truststore.secure_password:

1 A! U* u: U8 s# K: E8 \
输入密码： 第二次输入上面的密码：

6 e2 Z' l( N0 d8 {8 B+ h& t
/ U% G: N4 z" {* M5 h创建文件夹： mkdir -p certificates/
8 ^, V$ T) \5 ~: D1 M& Y. F


接下来和没有做鉴权的一样，逐个启动集群：

7 I( n& A  R" S: G" S8 S+ W
, J) }8 J1 H/ U
切换到其它用户，root用户不能启动ES：su es



3 r- b' r* h8 B, r" r4 lbin/elasticsearch -d
% M: T# H/ ]1 b* r, e[es@it-elassearch elasticsearch-8.15.0]$ bin/elasticsearch -d


8 J- \" F# j/ g1 I3 `[es@it-elassearch elasticsearch-8.15.0]$ bin/elasticsearch -d
Oct 24, 2024 5:33:34 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
7 R8 y% \$ h8 w2 {- _WARNING: COMPAT locale provider will be removed in a future release
[2024-10-24T17:33:40,246][INFO ][o.e.n.NativeAccess       ] [it-elassearch] Using native vector library; to disable start with -Dorg.elasticsearch.nativeaccess.enableVectorLibrary=false
/ s9 X  g/ p% Y* B/ m[2024-10-24T17:33:40,727][INFO ][o.e.n.NativeAccess       ] [it-elassearch] Using [jdk] native provider and native methods for [Linux]
+ \  w0 D2 p7 r3 K, E[2024-10-24T17:33:41,119][INFO ][o.a.l.i.v.PanamaVectorizationProvider] [it-elassearch] Java vector incubator API enabled; uses preferredBitSize=128; floating-point vectors only
; d$ [, }6 v: h) K0 W! I9 Y[2024-10-24T17:33:42,185][INFO ][o.e.n.Node               ] [it-elassearch] version[8.15.0], pid[8520], build[tar/1a77947f34deddb41af25e6f0ddb8e830159c179/2024-08-05T10:05:34.233336849Z], OS[Linux/3.10.0-1160.24.1.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/22.0.1/22.0.1+8-16]
9 D# A6 `$ B( M$ Z6 r[2024-10-24T17:33:42,186][INFO ][o.e.n.Node               ] [it-elassearch] JVM home [/data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/jdk], using bundled JDK [true]
[2024-10-24T17:33:42,186][INFO ][o.e.n.Node               ] [it-elassearch] JVM arguments [-Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=org.elasticsearch.preallocate, --enable-native-access=org.elasticsearch.nativeaccess,org.apache.lucene.core, -XX:ReplayDataFile=logs/replay_pid%p.log, -Djava.library.path=/data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/lib/platform/linux-x64:/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib, -Djna.library.path=/data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/lib/platform/linux-x64:/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib, -Des.distribution.type=tar, -XX:+UnlockDiagnosticVMOptions, -XX:G1NumCollectionsKeepPinned=10000000, -Xms4g, -Xmx4g, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-18180478638333286490, --add-modules=jdk.incubator.vector, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,level,pid,tags:filecount=32,filesize=64m, -XX:MaxDirectMemorySize=2147483648, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, --module-path=/data/elasticsearch/elastic-cluster1/elasticsearch-8.15.0/lib, --add-modules=jdk.net, --add-modules=ALL-MODULE-PATH, -Djdk.module.main=org.elasticsearch.server]
' k1 G5 I' Q! x. x: Q! ]( z[2024-10-24T17:33:42,187][INFO ][o.e.n.Node               ] [it-elassearch] Default Locale [en_US]
[2024-10-24T17:33:46,616][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [repository-url]
1 k* @0 `: l( {& _[2024-10-24T17:33:46,616][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [rest-root]
[2024-10-24T17:33:46,616][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-core]
[2024-10-24T17:33:46,617][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-redact]
[2024-10-24T17:33:46,617][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [ingest-user-agent]
& ^+ e! A& ?( g3 G' }; |" ^[2024-10-24T17:33:46,617][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-async-search]
. M4 U, L2 W/ {& u# w- |; J[2024-10-24T17:33:46,618][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-monitoring]
[2024-10-24T17:33:46,618][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [repository-s3]
. H  _: y% W9 ?) T[2024-10-24T17:33:46,618][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-esql-core]
. D4 k5 l/ R5 X& A6 j+ K[2024-10-24T17:33:46,619][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-analytics]
; _0 l8 ~) e' g3 w+ ?[2024-10-24T17:33:46,619][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-ent-search]
[2024-10-24T17:33:46,619][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-autoscaling]
[2024-10-24T17:33:46,619][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [lang-painless]
[2024-10-24T17:33:46,620][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-ml]
[2024-10-24T17:33:46,620][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [legacy-geo]
[2024-10-24T17:33:46,620][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [lang-mustache]
[2024-10-24T17:33:46,620][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-ql]
[2024-10-24T17:33:46,621][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [rank-rrf]
& \! b. @  P2 _- n3 n& b# x[2024-10-24T17:33:46,621][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [analysis-common]
* L$ I/ B/ M2 G9 }/ S[2024-10-24T17:33:46,621][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [health-shards-availability]
[2024-10-24T17:33:46,622][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [transport-netty4]
[2024-10-24T17:33:46,622][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [aggregations]
9 G# Q" C; c) Z% l[2024-10-24T17:33:46,622][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [ingest-common]
[2024-10-24T17:33:46,622][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-identity-provider]
[2024-10-24T17:33:46,623][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [frozen-indices]
; c$ D. y( k% _, E7 c6 p[2024-10-24T17:33:46,623][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-text-structure]
! _# F1 n( ?# m; v% v[2024-10-24T17:33:46,623][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-shutdown]
[2024-10-24T17:33:46,624][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [snapshot-repo-test-kit]
[2024-10-24T17:33:46,624][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [ml-package-loader]
[2024-10-24T17:33:46,624][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [kibana]
[2024-10-24T17:33:46,624][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [constant-keyword]
[2024-10-24T17:33:46,624][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-logstash]
3 ?: }* H0 W4 z6 A[2024-10-24T17:33:46,625][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-graph]
1 E) ]5 b$ b  Q3 N[2024-10-24T17:33:46,625][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-ccr]
. b9 I1 N* v' d# f4 P$ L* _[2024-10-24T17:33:46,625][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-esql]
3 W! }0 V3 W( j3 n5 d" {/ B[2024-10-24T17:33:46,625][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [parent-join]
) _' a* z. u$ i9 d8 Q[2024-10-24T17:33:46,626][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [counted-keyword]
[2024-10-24T17:33:46,626][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-enrich]
[2024-10-24T17:33:46,626][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [repositories-metering-api]
# u( b4 q, M( ^" K0 h8 i[2024-10-24T17:33:46,626][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [transform]
1 l* p" C4 E+ Z9 o3 s+ x. J[2024-10-24T17:33:46,627][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [repository-azure]
9 v6 M6 O0 t5 c- a/ b[2024-10-24T17:33:46,627][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [repository-gcs]
0 ^/ \! |: B8 B  f[2024-10-24T17:33:46,627][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [spatial]
0 e2 G8 ?. N4 T' ], g[2024-10-24T17:33:46,627][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [mapper-version]
' ~! ?) a( W' v% v) H0 ^[2024-10-24T17:33:46,628][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [mapper-extras]
% C% [* A5 V% S[2024-10-24T17:33:46,628][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [apm]
5 y' J6 o3 R; w/ d- m% }3 w7 U1 F1 W8 w[2024-10-24T17:33:46,628][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-rollup]
: P( s: H6 A: E7 L[2024-10-24T17:33:46,628][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [percolator]
[2024-10-24T17:33:46,628][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-stack]
* C% ?3 S6 c# f' q, O, ][2024-10-24T17:33:46,629][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [data-streams]
; k3 n: I9 f- X- U9 Z[2024-10-24T17:33:46,629][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [reindex]
4 |- ^9 y" p7 F+ P[2024-10-24T17:33:46,629][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [rank-eval]
[2024-10-24T17:33:46,629][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-security]
# {) m' v$ h8 ]1 T6 y. W& P[2024-10-24T17:33:46,630][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [blob-cache]
[2024-10-24T17:33:46,630][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [searchable-snapshots]
[2024-10-24T17:33:46,630][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-slm]
6 p+ k& y5 j7 R8 _4 e+ V[2024-10-24T17:33:46,630][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-geoip-enterprise-downloader]
  A4 e& s6 T' ?  _[2024-10-24T17:33:46,630][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [snapshot-based-recoveries]
' ~8 L4 U, r7 s" R( Y5 g% R1 U[2024-10-24T17:33:46,631][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-watcher]
8 n% [( Q5 b2 o; l/ `[2024-10-24T17:33:46,631][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [old-lucene-versions]
' v8 ^8 }; G: y# `/ M4 W$ A- y[2024-10-24T17:33:46,631][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-ilm]
[2024-10-24T17:33:46,631][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-voting-only-node]
) j6 Q; R" S5 k9 a: R, F+ ?[2024-10-24T17:33:46,632][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-inference]
[2024-10-24T17:33:46,632][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-deprecation]
$ \( D6 U3 L) v0 z( ]7 C. D/ C[2024-10-24T17:33:46,632][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-fleet]
2 Y: ]9 X* R3 k. b0 @[2024-10-24T17:33:46,632][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-profiling]
2 n0 E' m5 `. A6 v[2024-10-24T17:33:46,632][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-aggregate-metric]
[2024-10-24T17:33:46,633][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-downsample]
, {, Q! T) s, r) c7 S% P; F[2024-10-24T17:33:46,633][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [ingest-geoip]
) o1 @" \! \! \( _4 w9 p3 u% f[2024-10-24T17:33:46,633][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-write-load-forecaster]
[2024-10-24T17:33:46,633][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [search-business-rules]
1 n4 }( c* B8 A# G, n9 w  W[2024-10-24T17:33:46,633][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [wildcard]
# W" e% U' W/ F' _! q[2024-10-24T17:33:46,634][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [ingest-attachment]
[2024-10-24T17:33:46,634][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-apm-data]
: w3 u) l& @! ?0 b* G0 J1 `1 Q& }[2024-10-24T17:33:46,634][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-sql]
[2024-10-24T17:33:46,634][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [unsigned-long]
[2024-10-24T17:33:46,635][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-async]
[2024-10-24T17:33:46,635][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [runtime-fields-common]
[2024-10-24T17:33:46,635][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [vector-tile]
" F( t- M6 J1 t9 g+ R* c[2024-10-24T17:33:46,635][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [lang-expression]
[2024-10-24T17:33:46,636][INFO ][o.e.p.PluginsService     ] [it-elassearch] loaded module [x-pack-eql]
[2024-10-24T17:33:48,162][INFO ][o.e.e.NodeEnvironment    ] [it-elassearch] using [1] data paths, mounts [[/data (/dev/vdb)]], net usable_space [498.6gb], net total_space [499.7gb], types [xfs]
[2024-10-24T17:33:48,162][INFO ][o.e.e.NodeEnvironment    ] [it-elassearch] heap size [4gb], compressed ordinary object pointers [true]
[2024-10-24T17:33:48,227][INFO ][o.e.n.Node               ] [it-elassearch] node name [it-elassearch], node ID [1TZ7_AjMQBm4NUw73Dr9eQ], cluster name [essearch], roles [ml, data_hot, transform, data_content, data_warm, master, remote_cluster_client, data, data_cold, ingest, data_frozen]
6 `1 ?8 b+ V2 d4 ?[2024-10-24T17:33:53,605][INFO ][o.e.i.r.RecoverySettings ] [it-elassearch] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2024-10-24T17:33:53,836][INFO ][o.e.f.FeatureService     ] [it-elassearch] Registered local node features [data_stream.auto_sharding, data_stream.lifecycle.global_retention, data_stream.rollover.lazy, desired_node.version_deprecated, esql.agg_values, esql.async_query, esql.base64_decode_encode, esql.casting_operator, esql.counter_types, esql.disable_nullable_opts, esql.from_options, esql.metadata_fields, esql.metrics_counter_fields, esql.mv_ordering_sorted_ascending, esql.mv_sort, esql.spatial_points_from_source, esql.spatial_shapes, esql.st_centroid_agg, esql.st_contains_within, esql.st_disjoint, esql.st_intersects, esql.st_x_y, esql.string_literal_auto_casting, esql.string_literal_auto_casting_extended, esql.timespan_abbreviations, features_supported, file_settings, geoip.downloader.database.configuration, health.dsl.info, health.extended_repository_indicator, knn_retriever_supported, license-trial-independent-version, mapper.index_sorting_on_nested, mapper.keyword_dimension_ignore_above, mapper.pass_through_priority, mapper.range.null_values_off_by_one_fix, mapper.source.synthetic_source_fallback, mapper.track_ignored_source, mapper.vectors.bit_vectors, mapper.vectors.int4_quantization, rest.capabilities_action, retrievers_supported, rrf_retriever_supported, script.hamming, search.vectors.k_param_supported, security.migration_framework, security.roles_metadata_flattened, standard_retriever_supported, stats.include_disk_thresholds, text_similarity_reranker_retriever_supported, unified_highlighter_matched_fields, usage.data_tiers.precalculate_stats]
[2024-10-24T17:33:54,117][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [it-elassearch] [controller/8543] [Main.cc@123] controller (64 bit): Version 8.15.0 (Build 64f00009177815) Copyright (c) 2024 Elasticsearch BV
$ ], `5 f, z6 j; Q[2024-10-24T17:33:54,499][INFO ][o.e.t.a.APM              ] [it-elassearch] Sending apm metrics is disabled
[2024-10-24T17:33:54,500][INFO ][o.e.t.a.APM              ] [it-elassearch] Sending apm tracing is disabled
[2024-10-24T17:33:54,544][INFO ][o.e.x.s.Security         ] [it-elassearch] Security is disabled
[2024-10-24T17:33:54,846][INFO ][o.e.x.w.Watcher          ] [it-elassearch] Watcher initialized components at 2024-10-24T09:33:54.846Z
- A0 S( f7 b! E" u. O" R[2024-10-24T17:33:54,936][INFO ][o.e.x.p.ProfilingPlugin  ] [it-elassearch] Profiling is enabled
[2024-10-24T17:33:54,957][INFO ][o.e.x.p.ProfilingPlugin  ] [it-elassearch] profiling index templates will not be installed or reinstalled
[2024-10-24T17:33:54,964][INFO ][o.e.x.a.APMPlugin        ] [it-elassearch] APM ingest plugin is enabled
[2024-10-24T17:33:55,002][INFO ][o.e.x.a.APMIndexTemplateRegistry] [it-elassearch] APM index template registry is enabled
2 ?2 G8 t* _$ F7 Q4 }& Z[2024-10-24T17:33:55,537][INFO ][o.e.t.n.NettyAllocator   ] [it-elassearch] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
- y7 x# F9 H+ L% e6 @9 {# o  S[2024-10-24T17:33:55,633][INFO ][o.e.d.DiscoveryModule    ] [it-elassearch] using discovery type [multi-node] and seed hosts providers [settings]
[2024-10-24T17:33:57,137][INFO ][o.e.n.Node               ] [it-elassearch] initialized
5 [7 U! J8 q6 W& t[2024-10-24T17:33:57,138][INFO ][o.e.n.Node               ] [it-elassearch] starting ...
[2024-10-24T17:33:57,190][INFO ][o.e.x.s.c.f.PersistentCache] [it-elassearch] persistent cache index loaded
[2024-10-24T17:33:57,191][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [it-elassearch] deprecation component started
[2024-10-24T17:33:57,334][INFO ][o.e.t.TransportService   ] [it-elassearch] publish_address {172.24.110.125:9300}, bound_addresses {[::]:9300}
; F' g% E2 p3 l5 g[2024-10-24T17:33:57,569][INFO ][o.e.b.BootstrapChecks    ] [it-elassearch] bound or publishing to a non-loopback address, enforcing bootstrap checks
+ y" Y4 K0 I, C[2024-10-24T17:33:57,574][INFO ][o.e.c.c.ClusterBootstrapService] [it-elassearch] this node has not joined a bootstrapped cluster yet; [cluster.initial_master_nodes] is set to [it-elassearch, it-elassearch-2]
[2024-10-24T17:34:07,588][WARN ][o.e.c.c.ClusterFormationFailureHelper] [it-elassearch] master not discovered yet, this node has not previously joined a bootstrapped cluster, and this node must discover master-eligible nodes [it-elassearch, it-elassearch-2] to bootstrap a cluster: have discovered [{it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}]; discovery will continue using [172.24.110.126:9300] from hosts providers and [{it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}] from last-known cluster state; node term 0, last-accepted version 0 in term 0; for troubleshooting guidance, see https://www.elastic.co/guide/en/ ... roubleshooting.html
[2024-10-24T17:34:17,591][WARN ][o.e.c.c.ClusterFormationFailureHelper] [it-elassearch] master not discovered yet, this node has not previously joined a bootstrapped cluster, and this node must discover master-eligible nodes [it-elassearch, it-elassearch-2] to bootstrap a cluster: have discovered [{it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}]; discovery will continue using [172.24.110.126:9300] from hosts providers and [{it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}] from last-known cluster state; node term 0, last-accepted version 0 in term 0; for troubleshooting guidance, see https://www.elastic.co/guide/en/ ... roubleshooting.html
[2024-10-24T17:34:27,590][WARN ][o.e.n.Node               ] [it-elassearch] timed out while waiting for initial discovery state - timeout: 30s
0 C' W, R: U  s6 K% E[2024-10-24T17:34:27,594][WARN ][o.e.c.c.ClusterFormationFailureHelper] [it-elassearch] master not discovered yet, this node has not previously joined a bootstrapped cluster, and this node must discover master-eligible nodes [it-elassearch, it-elassearch-2] to bootstrap a cluster: have discovered [{it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}]; discovery will continue using [172.24.110.126:9300] from hosts providers and [{it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}] from last-known cluster state; node term 0, last-accepted version 0 in term 0; for troubleshooting guidance, see https://www.elastic.co/guide/en/ ... roubleshooting.html
[2024-10-24T17:34:27,609][INFO ][o.e.h.AbstractHttpServerTransport] [it-elassearch] publish_address {172.24.110.125:9200}, bound_addresses {[::]:9200}
[2024-10-24T17:34:27,637][INFO ][o.e.n.Node               ] [it-elassearch] started {it-elassearch}{1TZ7_AjMQBm4NUw73Dr9eQ}{wrEeokvZTM-NfqrlNd_FSQ}{it-elassearch}{172.24.110.125}{172.24.110.125:9300}{cdfhilmrstw}{8.15.0}{7000099-8512000}{ml.max_jvm_size=4294967296, ml.config_version=12.0.0, xpack.installed=true, transform.config_version=10.0.0, ml.machine_memory=8200949760, ml.allocated_processors=4, ml.allocated_processors_double=4.0}
[es@it-elassearch elasticsearch-8.15.0]$ netstat -ntlp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
6 ?4 o2 A) J3 K) ^% ~7 fActive Internet connections (only servers)
/ Z6 c! D* M' ~Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      -                  
tcp        0      0 0.0.0.0:60028           0.0.0.0:*               LISTEN      -                  
$ a2 }: O) b8 Dtcp6       0      0 :::9300                 :::*                    LISTEN      8520/java           
tcp6       0      0 ::1:25                  :::*                    LISTEN      -                  
tcp6       0      0 :::60028                :::*                    LISTEN      -                  
tcp6       0      0 :::9200                 :::*                    LISTEN      8520/java           
3 z8 b0 o# }  {7 [3 v  Y2 ]6 F



. ~$ ?, C8 m& T8 ]/ E

% z1 o% j0 z* K6 z

admin

oootstrap.svstem call tlter条犹呢片八涨架
network.host 绑定节点IP.
http.port 端囗。
& P. I0 @3 q- o% R+ ediscovery.zen,ping.unicast.hosts 提供其他 Elasticsearch 服务节点的单点广播发现功能,discoverv.zen.minimum, master nodes 集群中可工作的县有Master节点资格的最小数量，官方的推荐值是(N/2)+1，其中N是具有master资格的节点的数量discovery.zen,ping_timeout 节点在发现过程中的等待时间。
0 L( E2 c  U: Q注意创建/data下对应的子目录/elasticsearch/data、/cusc-logs

$ \+ n/ f# @" r/ Qelasticsearch jvm参数配置
vim jvm.options
) U% J! {0 W9 \' B0 PElasticsearch基于Lucene的，而Lucene底层是java实现，因此我们需要配置jvm参数。JVM参数根据服务器规格，改到合适的值，例如:-Xms4g-Xmx4g

0 S# t6 N: \! F8 c6 N; m4.4、集群配置
) k1 Q6 k. J( B; Hes的节点角色，通过elasticsearch.yml中配置:
7 r* |& @, t5 c% P6 q2 Y8 h$ d0 w对于主节点，可以将node.master的值设置为true，对于数据节点可以将node.data设置为true详情参考:
https://blog.csdn.net/m0 37814112/article/details/130885070
以下为既是主节点，也是数据节点的配置方式
##是不是有资格竞选主节点
node.master: true## 是否存储数据
, e3 G6 J3 Z" y

; p9 \% X" r2 l- B以下为既是主节点，也是数据节点的配置方式
##是不是有资格竞选主节点
! s1 Z, W. u4 F; }. s* l9 y& enode.master:true
2 j3 n# T* S$ ]$ h##是否存储数据
' E' [9 p$ m: W" gnode.data: true
/ T) t9 U$ N6 R7 X7 W& Z## 最大集群节点数
node.max local storage nodes:3
## 指定API端户端调用端口
4 d& X, h! x# g; Gtransport.tcp.port:9308
) W% l& c8 p8 X5 ]  m## 集群发现默认值为127.0.0.1:9380,如果要在其他主机上形成包含节点的群集,如果搭建集群则需要填写## es7.x 之后新增的配置，写入候选主节点的设备地址，在开启服务后可以被选为主节点，也就是说把所有的节点都写上discovery.seed hosts:["192.168.0.101",“192.168.0.102","192.168.0.103"]
2 \0 b, f* a2 z4 q## 当你在搭建集群的时候，选出合格的节点集群，有些人说的太官方了，
##其实就是，让你选择比较好的几个节点，在你节点启动时，在这些节点中选一个做领导者，
# o  t4 T1 V' w6 I( `## 如果你不设置呢，elasticsearch就会自己选举，这里我们把三个节点都写上cluster.initial master nodes:「"192.168.0.101","192.168.0.102","192.168.0.103"1##在群集完全重新启动后阻止初始恢复，直到启动N个节点
##简单点说在集群启动后，至少复活多少个节点以上，那么这个服务才可以被使用，否则不可以被使用，
gateway.recover after nodes:2## 禁用安全配置，否则查询的时候会提示警告
xpack.security.enabled:false
+ m, i) F: }. ?" m# N## 开启跨域访问支持，默认为false
3 H# K1 |- |; u  t7 O# \: Y: I. U; \http.cors.enabled:true
' l) M  M( P  G3 W6 ^+ m( g##跨域访问允许的域名，允许所有域名
( @  k3 h9 h' ?$ g# i+ k; ^! U5 fhttp.cors.allow-origin:"*"
( y" L; X7 E  v" b2 O. E
# i! D. V, x9 Q$ g0 D5 }
4.5、服务启动
9 B% t' S9 U# s- p; @在ES安装目录的bin目录下，通过elasticsearch文件启动ES
./elasticsearch -d
查看启动日志: cat /data/cusc-logs/elasticsearch.log
4.6、远程访问配置
1 q9 I. g5 F7 p开放9200端口
[root@hecs-292215 ~]# firewall-cmd --list-ports
0 H6 s  Z8 U7 j8848/tcproot@hecs-292215 ~# firewall-cmd --zone=public --add-port=9200/tcp --permanentsuccess
8 E$ B# F6 l" o) C& V[root@hecs-292215 ~]# systemctl restart firewalld.service
[root@hecs-292215 ~#firewall-cmd --list-ports
8848/tcp 9200/tcp
[root@hecs-292215 ~]#
* Q# A4 _) d5 A- E2 t访问页面会显示版本号和一些配置信息
6 v$ l& v: L7 w' k: A: N) n  @curl http://ip:9200
4.7、创建ES访问账号
& j: T" R7 h2 z" R9 F+ E6 [elasticsearch的访问账号，可以为elasticsearch部署kibana，在kibana管理控制台上创建用户账号https://zhuanlan.zhihu.com/p/660516178


0 l- o# [+ A- }! m, s6 W1 I( [

admin

详细解释
( b/ R2 S( @8 B配置es的集群名称，默认是elasticsearch，es会自动发现在同一网段下的es，如果在同一网段下有多个集群，就可以用这个属性来区分不同的集群。

+ u& }4 V) j; H+ H4 D3 f* a+ m节点名，默认随机指定一个name列表中名字，该列表在es的jar包中config文件夹里name.txt文件中，其中有很多作者添加的有趣名字。

指定该节点是否有资格被选举成为node，默认是true，es是默认集群中的第一台机器为master，如果这台机挂了就会重新选举master。

- J, x% V/ J9 P指定该节点是否存储索引数据，默认为true。
. A* S9 n5 ?& g9 U) G3 D6 j% O
, k2 f  l) |' k7 ?7 \( z; A5 l& B设置默认索引分片个数，默认为5片。

设置默认索引副本个数，默认为1个副本。
- e  X& p3 H9 H8 Z% M# l( g' t& Q
设置配置文件的存储路径，默认是es根目录下的config文件夹。
, I! E: T0 E# I2 p
设置索引数据的存储路径，默认是es根目录下的data文件夹，可以设置多个存储路径，用逗号隔开，例：

设置临时文件的存储路径，默认是es根目录下的work文件夹。
9 i+ b& b4 o3 E) X" `$ J1 ]. c6 u
3 T: `; j) K' p, A# k设置日志文件的存储路径，默认是es根目录下的logs文件夹
( |$ f- D+ d# Z+ J6 m& h) `
设置插件的存放路径，默认是es根目录下的plugins文件夹
0 j5 @) o. _2 }; h' i2 V' W2 K5 }) {
; e0 ^% f. @, O# B2 q$ V设置为true来锁住内存。因为当jvm开始swapping时es的效率会降低，所以要保证它不swap，可以把ES_MIN_MEM和ES_MAX_MEM两个环境变量设置成同一个值，并且保证机器有足够的内存分配给es。同时也要允许elasticsearch的进程可以锁住内存，Linux下可以通过ulimit -l unlimited命令。

) P8 I+ L/ F8 U0 P2 ?( x2 V( Ynetwork.bind_host: 192.168.0.1
- {1 q# S9 }( [, V设置绑定的ip地址，可以是ipv4或ipv6的，默认为0.0.0.0。
$ L# z6 y9 X- d+ `
4 p: J  f8 ?: u$ O! d7 G设置其它节点和该节点交互的ip地址，如果不设置它会自动判断，值必须是个真实的ip地址。

7 f! Y* E% f2 ^$ {这个参数是用来同时设置bind_host和publish_host上面两个参数。

设置节点间交互的tcp端口，默认是9300。
8 }+ s" k8 y2 ?0 d+ ^0 d7 W5 g$ U
设置是否压缩tcp传输时的数据，默认为false，不压缩。

设置对外服务的http端口，默认为9200。
$ A6 c  @; h! t5 V* O$ J- r
设置内容的最大容量，默认100mb

是否使用http协议对外提供服务，默认为true，开启。

gateway的类型，默认为local即为本地文件系统，可以设置为本地文件系统，分布式文件系统，Hadoop的HDFS，和amazon的s3服务器，其它文件系统的设置方法下次再详细说。

设置集群中N个节点启动时进行数据恢复，默认为1。

设置初始化数据恢复进程的超时时间，默认是5分钟。

  K' J8 F3 ?$ B0 @设置这个集群中节点的数量，默认为2，一旦这N个节点启动，就会立即进行数据恢复。

初始化数据恢复时，并发恢复线程的个数，默认为4。

添加删除节点或负载均衡时并发恢复线程的个数，默认为4。
8 `3 G( `" D& g/ P2 ^* \' y
设置数据恢复时限制的带宽，如入100mb，默认为0，即无限制。

设置这个参数来限制从其它分片恢复数据时最大同时打开并发流的个数，默认为5。
6 }1 Q/ ~4 d" f8 A3 c% y
% d: a8 k+ s$ d, X) ^设置这个参数来保证集群中的节点可以知道其它N个有master资格的节点。默认为1，对于大的集群来说，可以设置大一点的值（2-4）
, n8 D' }1 D& |9 x& N/ i+ h3 b
设置集群中自动发现其它节点时ping连接超时时间，默认为3秒，对于比较差的网络环境可以高点的值来防止自动发现时出错。

设置是否打开多播发现节点，默认是true。
" h3 [: T4 U" O, B. h
设置集群中master节点的初始列表，可以通过这些节点来自动发现新加入集群的节点。
3 \$ r' S* g$ t8 h3 M& K5 R( P
下面是一些查询时的慢日志参数设置

到此这篇关于elasticsearch.yml配置文件解读，ES配置详解的文章就介绍到这了,更多相关elasticsearch.yml配置文件

admin

Elasticsearch 的配置文件位于 $ES_HOME/config 目录下，文件名为 elasticsearch.yml。以下是一些常见的配置参数及其用法：

cluster.name：设置集群名称，默认为 elasticsearch。

node.name：设置节点名称，默认是在启动时随机分配的。

! E5 y) ^$ r4 E$ E2 nnetwork.host：设置绑定的网络接口，默认为 127.0.0.1，只允许本地访问。
" M3 |- |, {! |: t5 J
http.port：设置对外服务的HTTP端口，默认为 9200。
" c% A4 m) F5 d' f" F3 P  O& _
discovery.seed_hosts：设置集群中的种子节点列表，用于节点发现。
4 X+ P  P8 S: [
9 `% t: a, Q5 R& ecluster.initial_master_nodes：设置集群初始主节点的列表。
( q5 o% T6 r7 {# K
node.master：设置节点是否有资格被选举为master节点，默认 true。
; I5 L5 J; z4 Z% M# C6 G
node.data：设置节点是否存储数据，默认 true。
/ F( {# h/ W  Z
# ~# N5 o) }( E( w1 {2 Unode.ingest：设置节点是否处理插入（数据转换）请求，默认 true。
1 a- S5 Z0 R: A5 y/ G
0 T* R; ~0 F2 [) m, ipath.data：设置数据存储路径，默认为 $ES_HOME/data。

path.logs：设置日志文件路径，默认为 $ES_HOME/logs。
+ c$ ]: e; c6 S! t
+ J2 y. r4 `( m, n7 Ubootstrap.memory_lock：设置是否锁定物理内存，防止交换到虚拟内存，默认 false。

: ^- S( i2 ^6 m1 J+ f# Phttp.cors.enabled：设置是否启用CORS，默认 false。
9 u3 R6 }$ M6 |6 Q6 f9 M0 n( O
http.cors.allow-origin：设置允许的CORS来源，默认不允许。

. s5 O9 [3 W) [2 r5 m示例配置：

cluster.name: my-cluster
  |; m5 {9 u2 k1 \4 P( o% bnode.name: node-1
0 L3 N5 }; F. x6 j2 u% x( Y9 ~network.host: 192.168.1.10
2 I) S( V. ~6 ahttp.port: 9200
4 D" J0 V- p$ l- C7 q( Udiscovery.seed_hosts: ["192.168.1.10", "192.168.1.11"]
cluster.initial_master_nodes: ["node-1", "node-2"]
# v! V( |' `* o+ `6 y这个配置设置了集群名称、节点名称、网络绑定、对外服务端口、集群种子节点和初始主节点。根据实际需求，可以调整其他参数。