tar -zxvf elasticsearch-7.13.2-linux-x86_64.tar.gz
cd elasticsearch-7.13.2/
cd config/
vim jvm.options
改为：
-Xms1g
-Xmx1g
https://www.bilibili.com/video/BV1Zr4y1A7e7?p=4&spm_id_from=pageDriver
mkdir -p /usr/local/elasticsearch
tar -zxvf elasticsearch.tar.gz -C /usr/local/elasticsearch/
bin/elasticsearch
vi config/elasticsearch.yml
vi config/jvm.options
在 GC configuration
复制 8-13:-XX:UseConcMarkSweepGC，
注释掉旧的#
新的改为
8-13:-XX:UseG1GC
groupadd elk
useradd elk -g elk
chown -Rf elk:elk /usr/local/elasticsearch/
ll /usr/local/elasticsearch/
su elk
bin/elasticsearch
curl http://127.0.0.1:9200
修改配置，运行外网访问
vi config/elasticsearch.yml
修改 #network.host: 192.168.0.1
为 network.host: 0.0.0.0
企业里边为 受限的，允许的ip
关闭防火墙
再次启动4个warn 变为error
su root
vi /etc/security/limits.conf
尾部加入
elk soft nofile 65535
elk hard nofile 65535
elk soft nproc 4096
elk hard nproc 4096
vi /etc/sysctl.conf
末尾加入
vm.max_map_count=262144
sysctl -p
su elk
vim config/elasticsearch.yml
将 cluster.initial_master_nodes:["node1","node2"] 改为
cluster.initial_master_nodes:["当前机器的ip地址"]
后台启动加入 -d
