elasticsearch启动错误整理

一、elasticsearch错误复现

（一）、环境

配置环境
　　OS：CentOS 7.4 64bit
　　elasticsearch版本：5.4.
　　hostname：elk--
　　ip：10.18.43.170
   java版本：java -version "1.8.0_181"

（二）、错误复现

　　首先要获取必须的软件包

wget -P /var/ftp/ https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.1.tar.gz

wget --no-cookies --no-check-certificate --header "Cookie: gpw_e24=http%3A%2F%2Fwww.oracle.com%2F; oraclelicense=accept-securebackup-cookie" "http://download.oracle.com/otn-pub/java/jdk/8u181-b13/96a7b8442fe848ef90c96a2fad6ed6d1/jdk-8u181-linux-x64.tar.gz"

环境配置

sed -ri '/^SELINUX/cSELINUX=disabled' /etc/selinux/config
setenforce 

firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --permanent --add-port=/tcp
firewall-cmd --permanent --add-port=/tcp
firewall-cmd --reload

JDK配置

[root@elk-- ~]# tar xf jdk-8u181-linux-x64.tar.gz -C /usr/local/
[root@elk-- ~]# ln -s /usr/local/jdk1..0_181 /usr/local/java
[root@elk-- ~]# cat /etc/profile.d/java.sh
JAVA_HOME=/usr/local/java
PATH=$JAVA_HOME/bin:$PATH
export JAVA_HOME PATH

[root@elk-- ~]# source /etc/profile
[root@elk-- ~]# env | grep JAVA
JAVA_HOME=/usr/local/java

[root@elk-- ~]# java -version
java version "1.8.0_181"
Java(TM) SE Runtime Environment (build 1.8.0_181-b13)
Java HotSpot(TM) -Bit Server VM (build 25.181-b13, mixed mode)

elasticsearch配置

useradd elk
su - elk
mv /tmp/elasticsearch-5.4..tar.gz /home/elk
tar xf elasticsearch-5.4..tar.gz

配置文件elasticsearch-5.4.1/config/elasticsearch.yml

[elk@elk-- ~]$ egrep "^[^#$]" elasticsearch-5.4./config/elasticsearch.yml
cluster.name: my-elk
node.name: elk1
path.data: /tmp/data
path.logs: /tmp/logs
bootstrap.memory_lock: false
network.host: 0.0.0.0
http.port: 

elasticsearch不允许root用启动，我使用给他专门创建的用户elk用来启动它

[elk@elk-- ~]$ elasticsearch-5.4./bin/elasticsearch -d

（三）、日志输出

[--27T19::,][ERROR][o.e.b.Bootstrap          ] [elk1] node validation exception
[] bootstrap checks failed
[]: max file descriptors [] for elasticsearch process is too low, increase to at least []
[]: memory locking requested for elasticsearch process but memory is not locked
[]: max virtual memory areas vm.max_map_count [] is too low, increase to at least []

二、解决方法

错误一：

[]: max file descriptors [] for elasticsearch process is too low, increase to at least []

解决方法：

　　打开/etc/security/limits.conf文件，在末尾添加以下两行并保存：

* soft nofile      //*表示任意用户，这里是elasticsearch报的错，也可以直接填运行elk的用户;
* hard nofile 

错误二：

[]: memory locking requested for elasticsearch process but memory is not locked

解决方法：

　　修改elasticsearch.yml文件

bootstrap.memory_lock : false

错误三:

[]: max virtual memory areas vm.max_map_count [] is too low, increase to at least []

解决方法：

　　修改内核配置/etc/sysctl.d/99-sysctl.conf添加vm.max_map_count=262144

sysctl -w vm.max_map_count=
sysctl -p

错误四：

os::commit_memory(0x00000001006cd000, , ) failed; error=’Cannot allocate memory’ (errno=)

解决方法：

　　提供内存不足，增大主机内存或者减小elasticsearch的内存大小

[elk@elk-- ~]$ grep -v "^#" elasticsearch-5.4./config/jvm.options |grep -v "^$"
-Xms2g
-Xmx2g
-XX:+UseConcMarkSweepGC
-XX:CMSInitiatingOccupancyFraction=
-XX:+UseCMSInitiatingOccupancyOnly
-XX:+DisableExplicitGC
-XX:+AlwaysPreTouch
-server
-Xss1m
-Djava.awt.headless=true
-Dfile.encoding=UTF-
-Djna.nosys=true
-Djdk.io.permissionsUseCanonicalPath=true
-Dio.netty.noUnsafe=true
-Dio.netty.noKeySetOptimization=true
-Dio.netty.recycler.maxCapacityPerThread=
-Dlog4j.shutdownHookEnabled=false
-Dlog4j2.disable.jmx=true
-Dlog4j.skipJansi=true
-XX:+HeapDumpOnOutOfMemoryError

　　修改完成之后，建议退出当前登录用户，在重新登录，然后在重新启动elasticsearch，就可以一了，（注：tar包和unzip包，都是不允许elasticsearch程序让root用户来运行的，我们必须提前创建一个用户！）