es_5.4.4 reinstall log and upgrade to V6.5.4--APM

 

elastic-APM opbeat is dead
https://blog.csdn.net/chenwenhao0304/article/details/83302942
https://www.elastic.co/cn/solutions/security-analytics
https://segmentfault.com/a/1190000014864630

 

elastic-search upgrade

cd /data/app
tar -zxvf elasticsearch-6.5.4.tar.gz 
chown -R elsearch:elsearch ./elasticsearch-6.5.4

cd /data/app/elasticsearch-5.2.0/config
cp elasticsearch.yml jvm.options log4j2.properties ../../elasticsearch-6.5.4/config/
./elasticsearch-plugin install ingest-geoip

ssh -f -N -L 5601:10.1.196.38:5601 ec2-user@52.83.139.19

http://cwiki.apachecn.org/pages/viewpage.action?pageId=2887240

curl -H "Content-Type: application/json" -XPUT localhost:9200/_cluster/settings -d '{
"persistent" : {
"indices.breaker.request.limit" : "40%" 
}
}'

curl -H "Content-Type: application/json" -XPUT localhost:9200/_cluster/settings -d '{
"persistent" : {
"indices.breaker.fielddata.limit" : "40%" 
}
}'

curl -H "Content-Type: application/json" -XPOST 'localhost:9200/_cluster/reroute' -d '{
"commands" : [ 
{
"allocate_replica" : {
"index" : "ucampus_label_statistic",
"shard" : 0,
"node" : "node2"
}
}
]
}'

clone 机器造成的问题---data目录往往有try的内容，导致启动数据冲突；

 

 

PUT ucampus_onlineteacher/_settings

{

"index": {

"max_result_window": 10000000

}

 

PUT ucampus_onlineteacher/_mapping/ucampus_onlineteacher

{

"properties": {

"num": {

"type": "text",

"fielddata": true

}

}

}

ElasticSearch对于from-size的默认分页深度为10000，即from+size<10000

1. from：定义从哪里开始拿数据。
2. size：定义一共拿多少条数据
   需要将此值改大
   PUT [index_name]/_settings
   {
   "index": {
       "max_result_window": 10000000
   }
   }
    
   

   ---

"text" field 默认不能进行排序、聚合等操作，如果需要则需进行设置fielddata:true：

PUT [index_name]/_mapping/[type_name]
{
"properties": {
     "[field_name]": { 
          "type": "text",
           "fielddata": true
               }
           }
}