Elasticsearch版本：6.3.2bootstrap
Kibana版本：6.3.2app
1.es安裝
按照官方提示操做便可。elasticsearch
經過yum安裝或者下載tar包解壓。spa
安裝完成以後，須要修改一些配置code
①修改文件 /etc/sysctl.confblog
#添加如下內容 vm.max_map_count=655360
執行命令：it
sysctl -p
這一步能夠解決問題：max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]io
②修改文件/etc/security/limits.conf （es爲啓動es程序的用戶，默認是不容許使用root用戶操做es的）ast
es soft nofile 65536 es hard nofile 65536 es soft nproc 2048 es hard nproc 2048 es soft memlock unlimited es hard memlock unlimited
解決的問題：
[2018-08-14T09:35:24,417][WARN ][o.e.b.JNANatives ] Unable to lock JVM Memory: error=12, reason=Cannot allocate memory [2018-08-14T09:35:24,417][WARN ][o.e.b.JNANatives ] This can result in part of the JVM being swapped out. [2018-08-14T09:35:24,418][WARN ][o.e.b.JNANatives ] Increase RLIMIT_MEMLOCK, soft limit: 65536, hard limit: 65536 [2018-08-14T09:35:24,418][WARN ][o.e.b.JNANatives ] These can be adjusted by modifying /etc/security/limits.conf, for example: # allow user 'es' mlockall es soft memlock unlimited es hard memlock unlimited [2018-08-14T09:35:24,418][WARN ][o.e.b.JNANatives ] If you are logged in interactively, you will have to re-login for the new limits to take effect.
③修改文件 /etc/security/limits.d/90-nproc.conf （將1024改成2048）class
* soft nproc 2048
④修改 es配置文件 config/elasticsearch.yml （根據安裝方式不一樣，這個文件位置不一樣）
bootstrap.system_call_filter: false
解決的問題：
system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk