ELK 安装

ELIK安装文档 环境 IP 系统 Hostname 192.168.137.2 Centos6.9 service.master01.com 192.168.137.3 Centos6.9 service.slave01.com 192.168.137.4 Centos6.9 service.slave02.com 各插件版本 软件 版本 elasticsearch 5.5.1 kibana 5.5.2 node 6.11.2 Logstash 5.0

一、 elasticsearch安装 安装以前确保jdk1.8已经安装，关闭防火墙(能够不关闭，容许各节点能相互访问就OK)
(1) 下载 elasticsearch 下载地址：https://www.elastic.co yum install elasticsearch 或者 curl -L -O https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.5.1.tar.gz

修改/usr/local/elasticsearch-5.5.1/config/ elasticsearch.yml
cluster.name: my-application
node.name: service.master01.com
path.data: /data/elasticsearch/data
path.logs: /data/elasticsearch/logs
bootstrap.memory_lock: false
bootstrap.system_call_filter: false
network.host: 192.168.137.2
http.port: 9200
discovery.zen.ping.unicast.hosts: ["192.168.137.2", "192.168.137.3", "192.168.137.4"]
discovery.zen.minimum_master_nodes: 1
node.master: true
node.data: true
http.cors.enabled: true
http.cors.allow-origin: "*"
注意：修改配置文件冒号: 后面要空一格，否则报错，不信试一试
(2) 建立用户
Elk的运行是在普通用户下面
useradd elk
passwd elk
添加用户完毕
chown –R elk:elk elasticsearch-5.5.1
将上面配置好的elasticsearch拷贝到在从机器（192.168.137.3，192.168.137.4）上，修改配置文件将network.host修改成本机的IP地址，node.name修改成本机的hostname
修改/etc/security/limits.conf

End of file

• soft    nproc           65536

• hard    nproc           65536

• soft    nofile          65536

• hard    nofile          65536

修改/etc/sysctl.conf
kernel.shmall = 4294967296
vm.max_map_count=262144
(3) 启动
bin/elasticsearch
(4) 验证
浏览器中输入http://192.168.137.2:9200
二、 Head安装
Head 是可视化的工具
下载elasticsearch-head-master
git clone git://github.com/mobz/elasticsearch-head.git
下载node并配置环境变量
node-v6.11.2-linux-x64 解压缩
配置环境变量，下面环境变量是本人配置，须要修改为本身的
export JAVA_HOME=/usr/local/jdk
export NODE_HOME=/usr/local/node-v6.11.2-linux-x64/node_modules/.bin/node
export CLASSPATH=.:$JAVA_HOME/lib/tools.jar:$JAVA_HOME/lib/dt.jar:~/.vim/autoload
export ERLANG_HOME=/usr/local/erlang
export PATH=$NODE_HOME/bin:$JAVA_HOME/bin:$ERLANG_HOME/bin:$PATH

环境验证
source /etc/profile
node –v
npm –v

grunt 安装
cd elasticsearch-head-master
npm install grunt-cli
grunt -version
修改elasticsearch-head-master /Gruntfile.js
connect: {
server: {
options: {
hostname: '',
port: 9100,
base: '.',
keepalive: true
}
}
}
添加hostname: “”
修改elasticsearch-head-master/_site/app.js
将
this.base_uri = this.config.base_uri || this.prefs.get("app-base_uri") || "http://localhost:9200";
修改成
this.base_uri = this.config.base_uri || this.prefs.get("app-base_uri") || "http://192.168.137.2:9200";
启动head
node_modules/grunt/bin/grunt server

logstash安装
wget -O - http://packages.elasticsearch.org/GPG-KEY-elasticsearch | apt-key add -
cat >> /etc/apt/sources.list <<EOF
deb http://packages.elasticsearch.org/logstash/5.0/debian stable main
EOF
apt-get update
apt-get install logstash
三、kibana安装
Wget https://artifacts.elastic.co/downloads/kibana/kibana-5.5.2-linux-x86_64.tar.gz
tar –zxvf kibana-5.5.2-linux-x86_64.tar.gz
mv kibana-5.5.2 kibana
vim kibana/config/kibana.yml

上面所用到的插件下载地址：
https://pan.baidu.com/s/1miBmHPQ