ELK测试安装

https://blog.csdn.net/guyan0319/article/details/78749639

https://www.cnblogs.com/frankdeng/p/9139035.html#top （还可以）

http://www.cnblogs.com/javashare/p/9380156.html         elk6.3 centos集群搭建 head插件安装

https://www.cnblogs.com/royfans/p/9711937.html              kibana创建饼图

https://blog.csdn.net/zwq912318834/article/details/78657787        kibana创建曲线图

---

(1） 启动elasticsearch,  切换成非root用户启动elasticsearch。浏览器访问http://192.1168.3.18:9100/

(2）启动grunt,（elasticsearch-head）,cd切换到head-master文件夹再启动，[admin@node21 elasticsearch-head-master]$ grunt server &

(3）启动logstash ,    [admin@node21 bin]$ ./logstash -f /opt/datas/logstash-simple.conf

(4)启动bigdesk,浏览器打开 http://192.168.100.21/bigdesk-master/_site/#nodes ，点击右侧连接即可访问！

（5）启动kibana,[admin@node21 bin]$ ./kibana &   ，页面访问：192.168.100.21:5601

[root@smc logstash-6.2.4]# pwd
/root/logstash-6.2.4
[root@smc logstash-6.2.4]# ./bin/logstash -f /opt/datas/logstash-simple.conf                     然后随便输入些内容，再在网页的http://X.X.X.X:9100/ 的数据浏览->所有索引里面查看到刚才输入的内容。

---

错误处理：

1、centos 7 下 elasticsearch 运行失败的解决方法 https://blog.csdn.net/liucoding/article/details/80599997

报错信息：[elk@test elasticsearch-6.2.4]$ ./bin/elasticsearch -d
错误: 找不到或无法加载主类 org.elasticsearch.tools.launchers.JavaVersionChecker

解决方法：

不要在root 根目录就行，要在/home/xxxx/  项目下，下载elasticsearch

然后就用平时的普通用户就能运行了.

2、elasticsearch启动过程报错查看：先不要加参数-d

[elk@smc root]$ /home/elasticsearch-6.2.4/bin/elasticsearch
3、报错：

ERROR: [2] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
解决办法：https://blog.csdn.net/feinifi/article/details/73633235?utm_source=itdadao&utm_medium=referral

# cat /etc/sysctl.conf

vm.max_map_count=655360
net.ipv4.ip_forward = 1

4、elasticsearch及logstash启动过程稍长，需耐心等待。

5、安装nodejs

https://blog.csdn.net/zyjavaWeb/article/details/80023611

6、运行grunt server &报错解决办法

http://blog.sharechiwai.com/2014/10/fatal-error-unable-to-find-local-grunt/

报错信息：

[root@smc ~]# grunt server &
[1] 4367
[root@smc ~]# grunt-cli: The grunt command line interface (v1.2.0)

Fatal error: Unable to find local grunt.

If you're seeing this message, grunt hasn't been installed locally to
your project. For more information about installing and configuring grunt,
please see the Getting Started guide:

http://gruntjs.com/getting-started

[1]+ 退出 99 grunt server

解决办法：切换到elasticsearch-head-master文件夹，然后运行命令，

[root@smc ~]# cd elasticsearch-head-master/
[root@smc elasticsearch-head-master]# npm install grunt --save-dev