elasticsearch install on Centos 6.7

# elasticsearch install

---

## Install Elasticsearch

系统环境: System: Centos release 6.7 (Final)

ElasticSearch: 5.4.0
Java: openjdk version ”1.8.0_65″
Download and install the public signing key:

# rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch
Create a file called elasticsearch.repo in the /etc/yum.repos.d/ directory.

# vim /etc/yum.repos.d/elasticsearch.repo

```bash
[elasticsearch-5.x]
name=Elasticsearch repository for 5.x packages
baseurl=https://artifacts.elastic.co/packages/5.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
```

And your repository is ready for use. You can now install Elasticsearch with one of the following commands:

# sudo yum install elasticsearch

Download and install the RPM manuallyedit The RPM for Elasticsearch v5.4.0 can be downloaded from the website and installed as follows:

# wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.0.rpm
    # sha1sum elasticsearch-5.4.0.rpm 
    # sudo rpm --install elasticsearch-5.4.0.rpm

Download and install the .zip package

# wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.0.zip
    # sha1sum elasticsearch-5.4.0.zip 
    # unzip elasticsearch-5.4.0.zip
    # cd elasticsearch-5.4.0/

## Config

```bash
cluster.name: elasticsearch                       # 集群名称
node.name: es-node-01                             # 节点名称
path.data: /opt/elasticsearch-5.4.0/data          # 数据文件存储路径
path.logs: /opt/elasticsearch-5.4.0/logs          # log文件存储路径
    #network.host: 192.168.1.101                      # 默认网络连接地址
network.host: 0.0.0.0                             # 这样别的机器也可以访问
http.port: 9200                                   # 连接端口
transport.tcp.port: 9300                          # output 9300 port
discovery.zen.minimum_master_nodes: 2             # 这个参数来保证集群中的节点可以知道其它N个有master资格的节点。默认为1
    # discovery.zen.ping.multicast.enabled: false     # 禁用多播 
discovery.zen.ping.unicast.hosts: ["192.168.1.102", "192.168.1.103"]   # 集群中master节点的初始列表
discovery.zen.ping_timeout: 120s                  # 存活超时时间
bootstrap.system_call_filter: false               # 因centos6 kernel 2.6 need. centos7 kernel 3.10 don't it.
http.cors.enabled: true                           # 是否支持跨域，默认为false. 增加新的参数，这样head插件可以访问es
http.cors.allow-origin: "*"                       # 当设置允许跨域，默认为*,表示支持所有域名
    # mkdir /opt/elasticsearch-5.4.0/data
    # mkdir /opt/elasticsearch-5.4.0/logs
启动、关闭：Running Elasticsearch from the command line

# /opt/elasticsearch-5.4.0/bin/elasticsearch      # 前台启动
    # /opt/elasticsearch-5.4.0/bin/elasticsearch -d   # 后台启动
查看启动进程：ps | grep Elasticsearch 关闭： kill -9 pid

cluster.name: my_elk1
node.name: node_elk1
path.data: /home/data/es/data
path.logs: /home/data/es/logs
network.host: 10.81.235.26
http.port: 9200
bootstrap.system_call_filter: false
注:测试时，分配内存建议大于2G

Elasticsearch默认安装后设置的内存是1GB，对于任何一个现实业务来说，这个设置都太小了。如果你正在使用这个默认堆内存配置，你的集群配置可能会很快发生问题。 这里有两种方式修改Elasticsearch的堆内存（下面就说内存好了），最简单的一个方法就是指定ES_HEAP_SIZE环境变量。服务进程在启动时候会读取这个变量，并相应的设置堆的大小。设置命令如下：

export ES_HEAP_SIZE=5g
此外，你也可以通过命令行参数的形式，在程序启动的时候把内存大小传递给它：

./bin/elasticsearch -Xmx256m -Xms256m
    # vim /etc/security/limits.conf
    # add user tester open file numbers.
tester  soft    nofile  65536
tester  hard    nofile  65536
#
    # vim /etc/security/limits.d/90-nproc.conf
*          soft    nproc     1024
    # Change value TO 
*          soft    nproc     2048
    # vim /etc/sysctl.conf
    # add vm memory vale from blow tail line...
vm.max_map_count=262144
    # vim /opt/elasticsearch-5.4.0/config/jvm.options
    #-Xms2g
    #-Xmx2g
    # xms/xmx value limits change to small.  warning number / 1024/1024  = xms/xmx
-Xms256m
-Xmx256m
```

## 重新启动系统后，再启动程序。

# /opt/elasticsearch-5.4.0/bin/elasticsearch -d   # 后台启动

# curl http://192.168.31.145:9200
    
```bash

{
  "name" : "node-1",
  "cluster_name" : "my-app",
  "cluster_uuid" : "WDvmMG1xQMmtps88G-832w",
  "version" : {
    "number" : "5.4.0",
    "build_hash" : "780f8c4",
    "build_date" : "2017-04-28T17:43:27.229Z",
    "build_snapshot" : false,
    "lucene_version" : "6.5.0"
  },
  "tagline" : "You Know, for Search"
}
```

## 健康检查

# curl http://192.168.31.145:9200/_cluster/health?pretty=true

```bash  
{
cluster_name: "ES-1",
status: "yellow",
timed_out: false,
number_of_nodes: 1,
number_of_data_nodes: 1,
active_primary_shards: 1,
active_shards: 1,
relocating_shards: 0,
initializing_shards: 0,
unassigned_shards: 1,
delayed_unassigned_shards: 0,
number_of_pending_tasks: 0,
number_of_in_flight_fetch: 0,
task_max_waiting_in_queue_millis: 0,
active_shards_percent_as_number: 50
}
```
## x-pack

X-Pack是一个Elastic Stack的扩展，将安全，警报，监视，报告和图形功能包含在一个易于安装的软件包中

# cd es/*****   bin/elasticsearch-plugin install x-pack