ELK(2):ELK安装环境和安装包
ELK(2):ELK环境和安装包准备
1.1 环境配置
1.1.1 配置Java环境
elasticsearch和Logstash 的运行依赖于 Java 运行环境, Logstash 5.6 以上版本不低于 Oracle JDK version 1.8.0_131,7.0之后貌似对OpenJDK支持友好。出于习惯,这里采用的1.8.0_212。
java -version #java version "1.8.0_212" #Java(TM) SE Runtime Environment (build 1.8.0_212-b10) #Java HotSpot(TM) 64-Bit Server VM (build 25.212-b10, mixed mode)
1.1.2 调整可用内存
#elasticsearch最少262144 否则报错
#永久 echo 'vm.max_map_count=655360' | sudo tee -a /etc/sysctl.conf sudo sysctl -p #临时 sudo sysctl -w vm.max_map_count=655360 #查看 sudo sysctl -a|grep vm.max_map_count
1.1.3 调整最大打开文件数
#elasticsearch要求65535否则报错
echo "* soft nofile 655350" | sudo tee -a /etc/security/limits.conf echo "* hard nofile 655350" | sudo tee -a /etc/security/limits.conf ulimit –Hu ulimit -Su
如果重新登录不生效
vi /etc/ssh/sshd_config
将# UseLogin no 改成 UseLogin
yes,并重启 ssh
1.2 RPM安装包
ELK 套间版本尽量一致,避免各种坑和奇葩的错误!Redis 还是采用3.0后的吧!我提前安装了用的4.0.6
https://www.elastic.co/downloads
http://download.redis.io/releases/
elasticsearch-7.2.0-x86_64.rpm
filebeat-7.2.0-x86_64.rpm
kibana-7.2.0-x86_64.rpm
logstash-7.2.0.rpm
redis:4.0.6 #我预先安装了,不一定用
nohup wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.2.0-x86_64.rpm & nohup wget https://artifacts.elastic.co/downloads/logstash/logstash-7.2.0.rpm & nohup wget https://artifacts.elastic.co/downloads/kibana/kibana-7.2.0-x86_64.rpm & nohup wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.2.0-x86_64.rpm &