elk中elasticsearch安装启动报错

Posted

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了elk中elasticsearch安装启动报错相关的知识,希望对你有一定的参考价值。


elasticsearch安装之后。启动报错。elasticsearch版本为5.4.1

下载安装:

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.1.tar.gz
tar zxf elasticsearch-5.4.1.tar.gz
mv elasticsearch-5.4.1 /usr/local/elasticsearch
cd /usr/local/elasticsearch/
./bin/elasticsearch

[2017-06-20T09:57:45,307][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [node-1] uncaught exception in thread [main]

org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root

    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:127) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:114) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:67) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:122) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.cli.Command.main(Command.java:88) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:91) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:84) ~[elasticsearch-5.4.1.jar:5.4.1]

Caused by: java.lang.RuntimeException: can not run elasticsearch as root

    at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:106) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:194) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:350) ~[elasticsearch-5.4.1.jar:5.4.1]

    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:123) ~[elasticsearch-5.4.1.jar:5.4.1]

    ... 6 more

技术分享

原因:elasticsearch自5版本之后,处于安全考虑,不允许使用root用户运行。

解决:创建一个普通用户,将elasticsearch 安装目录权限修改一下,切换至普通用户运行elasticsearch就可以了

useradd  elk
chown -R elk.elk /usr/local/elasticsearch/
su -  elk
cd /usr/local/elasticsearch/
[[email protected] elasticsearch]$ ./bin/elasticsearch


[2017-06-20T19:38:54,458][INFO ][o.e.n.Node               ] [node-1] initializing ...

[2017-06-20T19:38:54,535][INFO ][o.e.e.NodeEnvironment    ] [node-1] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [12

.7gb], net total_space [14.5gb], spins? [unknown], types [rootfs][2017-06-20T19:38:54,536][INFO ][o.e.e.NodeEnvironment    ] [node-1] heap size [1.9gb], compressed ordinary object pointers [true]

[2017-06-20T19:38:54,537][INFO ][o.e.n.Node               ] [node-1] node name [node-1], node ID [3XuI5pfIRN6MUEuRkq6ZHw]

[2017-06-20T19:38:54,537][INFO ][o.e.n.Node               ] [node-1] version[5.4.1], pid[2245], build[2cfe0df/2017-05-29T16:05:51.443Z

], OS[Linux/3.10.0-327.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_131/25.131-b12][2017-06-20T19:38:54,537][INFO ][o.e.n.Node               ] [node-1] JVM arguments [-Xms2g, -Xmx2g, -XX:+UseConcMarkSweepGC, -XX:CMSIn

itiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+DisableExplicitGC, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -Djdk.io.permissionsUseCanonicalPath=true, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j.skipJansi=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.path.home=/usr/local/elasticsearch][2017-06-20T19:38:55,358][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [aggs-matrix-stats]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [ingest-common]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-expression]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-groovy]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-mustache]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-painless]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [percolator]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [reindex]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [transport-netty3]

[2017-06-20T19:38:55,359][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [transport-netty4]

[2017-06-20T19:38:55,360][INFO ][o.e.p.PluginsService     ] [node-1] no plugins loaded

[2017-06-20T19:38:56,602][INFO ][o.e.d.DiscoveryModule    ] [node-1] using discovery type [zen]

[2017-06-20T19:38:57,145][INFO ][o.e.n.Node               ] [node-1] initialized

[2017-06-20T19:38:57,146][INFO ][o.e.n.Node               ] [node-1] starting ...

[2017-06-20T19:38:57,423][INFO ][o.e.t.TransportService   ] [node-1] publish_address {192.168.199.17:9300}, bound_addresses {192.168.1

99.17:9300}[2017-06-20T19:38:57,429][INFO ][o.e.b.BootstrapChecks    ] [node-1] bound or publishing to a non-loopback or non-link-local address,

enforcing bootstrap checksERROR: [2] bootstrap checks failed

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

[2017-06-20T19:38:57,443][INFO ][o.e.n.Node               ] [node-1] stopping ...

[2017-06-20T19:38:57,469][INFO ][o.e.n.Node               ] [node-1] stopped

[2017-06-20T19:38:57,469][INFO ][o.e.n.Node               ] [node-1] closing ...

[2017-06-20T19:38:57,498][INFO ][o.e.n.Node               ] [node-1] closed



跟系统优化参数有关。修改sysctl内核参数

sysctl -w vm.max_map_count=262144
[[email protected] ~]# echo "vm.max_map_count=262144" >> /etc/sysctl.conf
[[email protected] ~]# sysctl -p
vm.max_map_count = 262144
[[email protected] ~]# vi /etc/security/limits.conf
*       soft    nofile  65536
*       hard    nofile  65536

重新启动:

[[email protected] elasticsearch]$ ./bin/elasticsearch

[2017-06-20T19:54:32,887][INFO ][o.e.n.Node               ] [node-1] initializing ...

[2017-06-20T19:54:32,958][INFO ][o.e.e.NodeEnvironment    ] [node-1] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [12

.7gb], net total_space [14.5gb], spins? [unknown], types [rootfs][2017-06-20T19:54:32,958][INFO ][o.e.e.NodeEnvironment    ] [node-1] heap size [1.9gb], compressed ordinary object pointers [true]

[2017-06-20T19:54:32,959][INFO ][o.e.n.Node               ] [node-1] node name [node-1], node ID [3XuI5pfIRN6MUEuRkq6ZHw]

[2017-06-20T19:54:32,960][INFO ][o.e.n.Node               ] [node-1] version[5.4.1], pid[2244], build[2cfe0df/2017-05-29T16:05:51.443Z

], OS[Linux/3.10.0-327.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_131/25.131-b12][2017-06-20T19:54:32,960][INFO ][o.e.n.Node               ] [node-1] JVM arguments [-Xms2g, -Xmx2g, -XX:+UseConcMarkSweepGC, -XX:CMSIn

itiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+DisableExplicitGC, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -Djdk.io.permissionsUseCanonicalPath=true, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j.skipJansi=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.path.home=/usr/local/elasticsearch][2017-06-20T19:54:33,856][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [aggs-matrix-stats]

[2017-06-20T19:54:33,856][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [ingest-common]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-expression]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-groovy]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-mustache]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [lang-painless]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [percolator]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [reindex]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [transport-netty3]

[2017-06-20T19:54:33,857][INFO ][o.e.p.PluginsService     ] [node-1] loaded module [transport-netty4]

[2017-06-20T19:54:33,858][INFO ][o.e.p.PluginsService     ] [node-1] no plugins loaded

[2017-06-20T19:54:35,473][INFO ][o.e.d.DiscoveryModule    ] [node-1] using discovery type [zen]

[2017-06-20T19:54:36,118][INFO ][o.e.n.Node               ] [node-1] initialized

[2017-06-20T19:54:36,118][INFO ][o.e.n.Node               ] [node-1] starting ...

[2017-06-20T19:54:36,304][INFO ][o.e.t.TransportService   ] [node-1] publish_address {192.168.199.17:9300}, bound_addresses {192.168.1

99.17:9300}[2017-06-20T19:54:36,310][INFO ][o.e.b.BootstrapChecks    ] [node-1] bound or publishing to a non-loopback or non-link-local address,

enforcing bootstrap checks[2017-06-20T19:54:39,402][INFO ][o.e.c.s.ClusterService   ] [node-1] new_master {node-1}{3XuI5pfIRN6MUEuRkq6ZHw}{8FjudtquQS-SkPWx0B7d5

A}{192.168.199.17}{192.168.199.17:9300}, reason: zen-disco-elected-as-master ([0] nodes joined)[2017-06-20T19:54:39,438][INFO ][o.e.h.n.Netty4HttpServerTransport] [node-1] publish_address {192.168.199.17:9200}, bound_addresses {1

92.168.199.17:9200}[2017-06-20T19:54:39,446][INFO ][o.e.n.Node               ] [node-1] started

[2017-06-20T19:54:39,452][INFO ][o.e.g.GatewayService     ] [node-1] recovered [0] indices into cluster_state

启动成功。按ctrl+C退出。使用-d参数让服务在后台运行

[[email protected] local]$ ./elasticsearch/bin/elasticsearch -d

技术分享

这样就启动成功了。

注意:普通用户不能修改打开文件句柄数,切换到root用户,修改之后需要重启。


本文出自 “努力奔小康” 博客,请务必保留此出处http://302876016.blog.51cto.com/12889292/1940259

以上是关于elk中elasticsearch安装启动报错的主要内容,如果未能解决你的问题,请参考以下文章

elk报错

ELK部署和过程中的报错汇总

ELK 中的elasticsearch 集群的部署

elk启动(elasticsearchlogstashkibana)

docker搭建服务及报错解决-elk

ELK之Centos6.9_x64安装elasticsearch6.2.1