[2016-12-20T22:37:28,543][INFO ][o.e.b.BootstrapCheck ] [elk-node1] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks [2016-12-20T22:37:28,552][ERROR][o.e.b.Bootstrap ] [elk-node1] node validation exception bootstrap checks failed max number of threads [1024] for user [elasticsearch] is too low, increase to at least [2048] [2016-12-20T22:37:28,560][INFO ][o.e.n.Node ] [elk-node1] stopping ... [2016-12-20T22:37:28,628][INFO ][o.e.n.Node ] [elk-node1] stopped [2016-12-20T22:37:28,629][INFO ][o.e.n.Node ] [elk-node1] closing ... [2016-12-20T22:37:28,677][INFO ][o.e.n.Node ] [elk-node1] closed
ERROR: bootstrap checks failed max file descriptors [4096] for elasticsearch process likely too low, increase to at least [65536] max number of threads [1024] for user [lishang] likely too low, increase to at least [2048]
解決:切換到root用戶,編輯limits.conf 添加相似以下內容 vi /etc/security/limits.conf 添加以下內容: * soft nofile 65536 * hard nofile 131072 * soft nproc 2048 * hard nproc 4096
max number of threads [1024] for user [lish] likely too low, increase to at least [2048]
切換到root用戶,進入limits.d目錄下修改配置文件。 vi /etc/security/limits.d/90-nproc.conf 修改以下內容: * soft nproc 1024 #修改成 * soft nproc 2048
max virtual memory areas vm.max_map_count [65530] likely too low, increase to at least [262144]
切換到root用戶修改配置sysctl.conf vi /etc/sysctl.conf 添加下面配置: vm.max_map_count=655360 並執行命令: sysctl -p 而後,從新啓動elasticsearch,便可啓動成功。