elasticsearch与kibana安装
下载
Elasticsearch 官网:https://www.elastic.co/，elastic search应用本质就是一个jvm进程，所以需要Java环境，请先配置windows | linux中的Java环境。接着在https://www.elastic.co/downloads/elasticsearch页下载相应的es版本，Linux or Windows均有，我这里以linux为例，下载了elasticsearch-6.6.1。
为了方便与es交互，我们使用 Kibana的 Dev Tools窗口，所以接着下载kibana，下载路径:https://www.elastic.co/downloads/kibana，我这里还是下载的linux版的kibana-6.6.1，双击/kibana-6.61/bin/kibana.bat即可启动，默认端口为5601，启动后浏览器访问http://ip:5601。
下载完成后将其上传至linux服务器即可，我这里存放的地址是 /usr/local/myinstall/elasticsearch.
安装
①解压（先到文件存放的位置）
tar -zxvf elasticsearch-6.6.1.tar.gz tar -zxvf kibana-6.6.1-linux-x86_64.tar.gz
②修改配置
elasticsearch需要使用的过程中，两个文件目录用来存放数据，一个是用来存放index数据的data目录，另一个是用来存放日志文件的log目录。（文件夹名字不固定）
以下是我的目录结构：
②编辑 elasticsearch.yml 配置
vim /usr/local/myinstall/elasticsearch/elasticsearch-6.6.1/config/elasticsearch.yml
# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
# Before you set out to tweak and tune the configuration, make sure you
# understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
cluster.name: my-es-application-0
# # 节点名称同理,可自动生成也可手动配置
node.name: myProjectName-0
# 允许一个节点是否可以成为一个master节点,es是默认集群中的第一台机器为master,如果这台机器停止就会重新选举master.
node.master: true
# 允许该节点存储数据(默认开启)
node.data: true
# # 新增索引
node.ingest: true #
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
#node.name: node-1
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
#path.data: /path/to/data
#
# Path to log files:
#
#path.logs: /path/to/logs
# # 数据存储目录
path.data: /usr/local/myinstall/elasticsearch/data
#日志存储目录
path.logs: /usr/local/myinstall/elasticsearch/log #
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory. # 设置memory_lock来锁定进程的物理内存地址,避免交换（swapped）来提高性能
bootstrap.memory_lock: false
bootstrap.system_call_filter: false # ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
#network.host: 192.168.0.1
#
# Set a custom port for HTTP:
#
#http.port: 9200
#
# For more information, consult the network module documentation. # 设置外网访问
network.host: 0.0.0.0
# 端口
http.port: 9200
# 是否支持跨域，默认为false
http.cors.enabled: true
# 当设置允许跨域，默认为*,表示支持所有域名，如果我们只是允许某些网站能访问，那么可以使用正则表达式。比如只允许本地地址。
http.cors.allow-origin: "*" # --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when new node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.zen.ping.unicast.hosts: ["host1", "host2"]
#
# Prevent the "split brain" by configuring the majority of nodes (total number of master-eligible nodes / 2 + 1):
#
#discovery.zen.minimum_master_nodes:
#
# For more information, consult the zen discovery module documentation.
#
# ---------------------------------- Gateway -----------------------------------
#
# Block initial recovery after a full cluster restart until N nodes are started:
#
#gateway.recover_after_nodes: 3
#
# For more information, consult the gateway module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Require explicit names when deleting indices:
#
#action.destructive_requires_name: true
#
③设置每个进程最大同时打开文件数
vim /etc/security/limits.conf
在文件最后，可修改如下配置：
root hard nofile 65535
root soft nofile 65535
* soft nproc 65535
* hard nproc 65535
④可以修改 JVM参数，设置堆大小
vim /usr/local/myinstall/elasticsearch/elasticsearch-6.6.1/config/jvm.options
在文件种，增加如下配置:
-Xms512m
-Xmx512m
⑤设置用户拥有的内存权限大小
1.编辑sysctl.conf文件 vim /etc/sysctl.conf 2.在文件最后，增加如下配置： vm.max_map_count=655360 3. 添加完毕之后，执行下面命令，使配置生效 sysctl -p
⑥设置用户权限
es出于系统安全考虑设置的条件,不允许使用root用户启动，因此需要创建一个用户来启动es。
1、创建用户：elasticsearch adduser elasticsearch 2、创建用户密码，需要输入两次 passwd elasticsearch 3、将对应的文件夹权限赋给该用户 chown -R elasticsearch /usr/local/myinstall/elasticsearch 4、切换至elasticsearch用户 su elasticsearch 5、进入es的bin目录启动 （后台启动） ./elasticsearch & 6、启动后测试 输入ip:9200,如果返回一个json数据说明启动成功
⑦启动报错
ERROR: [2] bootstrap checks failed
[1]: max file descriptors [65535] for elasticsearch process is too low, increase to at least [65536]
[2]: max number of threads [3896] for user [elasticsearch] is too low, increase to at least [4096]
解决：
[1]的错误去vim /etc/security/limits.conf 修改为65536即可
root hard nofile 65536
root soft nofile 65536
* soft nproc 65536
* hard nproc 65536
[2]的错误。启动时报错：max number of threads [3896] for user [elasticsearch] is too low, increase to at least [4096]；查资料后，查看服务器当前用户的最大线程数为3895，修改配置文件/etc/security/limits.d/20-nproc.conf（Centos7）中的nproc为4096后，切换到elasticsearch用户查看当前最大线程数还是为3895。修改没效，Elasticsearch启动要求最大线程数至少为4096。
解决：有的服务器修改 /etc/security/limit.d/20-nproc.conf 配置文件中的 * soft nproc 的值为4096即可，像我上述的情况修改了也没有作用，需要再加一句 * hard nproc 4096，然后完美解决问题。如下：
* hard nproc 4096
* soft nproc 4096
root soft nproc unlimited
⑧启动
启动到es目录的bin目录下使用 ./elasticsearch & 即可。浏览器访问地址： ip:9200 ,页面返回一段json就成功了。
kibana安装
kibana的安装与配置只需要解压，然后到config目录下修改kibana.yml文件：
server.port: 9100 #设置外网访问
然后到bin目录下启动即可。./kibana &