ELK搭建過程當中出現的問題與解決方法彙總

搭建過程當中出現的問題

elasticsearch啓動過程當中報錯【1】

ERROR: [1] bootstrap checks failed
[1]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, d                                                                                                                           iscovery.seed_providers, cluster.initial_master_nodes] must be configured
[2019-06-03T07:05:44,761][INFO ][o.e.n.Node               ] [hz] stopping ...
[2019-06-03T07:05:44,788][INFO ][o.e.n.Node               ] [hz] stopped
[2019-06-03T07:05:44,788][INFO ][o.e.n.Node               ] [hz] closing ...
[2019-06-03T07:05:44,801][INFO ][o.e.n.Node               ] [hz] closed
[2019-06-03T07:05:44,804][INFO ][o.e.x.m.p.NativeController] [hz] Native controller process has stopped - no ne                                                                                                                           w native processes can be started

解決辦法

#修改config/elasticsearch.yml下約第23行，放開node.name註釋，可更更名稱
node.name: node-1

elasticsearch啓動過程當中報錯【2】

ERROR: [1] bootstrap checks failed
[1]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes] must be configured

解決辦法

#打開第68行註釋，ip替換host1等，多節點請添加多個ip地址，單節點可寫按默認來
#配置如下三者，最少其一
#[discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes]
cluster.initial_master_nodes: ["node-1"] #這裏的node-1爲node-name配置的值

###### ###### ###### ###### ###### ###### ###### ######

沒法經過外部ip訪問elasticsearch

解決辦法

#修改config/elasticsearch.yml下約第55行,修改成當前es地址或0.0.0.0
network.host: 0.0.0.0

###### ###### ###### ###### ###### ###### ###### ######

Failed to clear cache for realms [[]]

暫無解決辦法，官方github上已經有人提issue了

###### ###### ###### ###### ###### ###### ###### ######

[status][plugin:spaces@7.1.1] Status changed from yellow to green - Ready

這個問題只會出如今單體ELK中，無需理會

###### ###### ###### ###### ###### ###### ###### ######

max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

解決辦法：

臨時解決辦法：切換root用戶執行以下命令

# sysctl -w vm.max_map_count=262144

永久解決辦法：在 /etc/sysctl.conf文件最後添加一行

# echo "vm.max_map_count=262144" > /etc/sysctl.conf
# sysctl -p  #使修改當即生效

查看修改結果：

# sysctl -a|grep vm.max_map_count

顯示：

vm.max_map_count = 262144

###### ###### ###### ###### ###### ###### ###### ######

ERROR: bootstrap checks failed
memory locking requested for elasticsearch process but memory is not locked

這是由於設置了鎖定內存參數bootstrap.memory_lock=true，這裏給出本人以前的筆記連接http://www.javashuo.com/article/p-rahqeszd-bz.html

未完待續