elk安装时最常见的报错

1.在启动kibana的时候报一下错误

max file descriptors [4096] for elasticsearch process likely too low, increase to at least [65536]
max number of threads [1024] for user [lishang] likely too low, increase to at least [2048]

解决方法：切换到root账户后，修改/etc/security/limits.conf 文件

添加

* soft nofile 65536

* hard nofile 131072

* soft nproc 2048

* hard nproc 4096

2.max number of threads [1024] for user [lish] likely too low, increase to at least [2048]

将* soft nproc 1024 改为* soft nproc 2048

3.max virtual memory areas vm.max_map_count [65530] likely too low, increase to at least [262144]

切换到root，在vi /etc/sysctl.conf 下添加

vm.max_map_count=655360 保存后 sysctl -p

4.system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk

在elasticsearch.yml中添加  bootstrap.system_call_filter: false