Ubuntu二进制安装ElasticSearch7.17.x版本集群
概述本文主要讲解如何二进制安装Linux二进制集群
环境信息
主机名IP地址系统ELK0110.0.0.40Ubuntu22.04ELK0210.0.0.41Ubuntu22.04ELK0310.0.0.42Ubuntu22.04实操
安装JDK（所有节点都需要安装）
ElasticSearch是使用Java语言开发的，所以运行时依赖JDK
安装JDK可以参考这篇文章：https://www.cnblogs.com/huangSir-devops/p/18919758
ElasticSearch版本和Java版本对应关系，可以阅读这篇文章：https://www.elastic.co/support/matrix#matrix_jvm
我们这里安装ELasticSearch7.17.x版本的，我们安装JDK11版本
# 下载# wget https://mirrors.huaweicloud.com/openjdk/11.0.2/openjdk-11.0.2_linux-x64_bin.tar.gz# ll openjdk-11.0.2_linux-x64_bin.tar.gz-rw-r--r-- 1 root root 187513052 Jan 182019 openjdk-11.0.2_linux-x64_bin.tar.gz# 解压# tar -xvf openjdk-11.0.2_linux-x64_bin.tar.gz# 创建软连接# ln -s /root/jdk-11.0.2 /usr/local/jdk11# ll /usr/local/jdk11lrwxrwxrwx 1 root root 16 Jun 14 21:09 /usr/local/jdk11 -> /root/jdk-11.0.2/# 配置环境变量# vim /etc/profile# 根据实际安装路径修改export JAVA_HOME=/usr/local/jdk11/export PATH=$JAVA_HOME/bin:$PATHexport CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar# 加载环境变量# source /etc/profile# 验证# java -versionopenjdk version "11.0.2" 2019-01-15OpenJDK Runtime Environment 18.9 (build 11.0.2+9)OpenJDK 64-Bit Server VM 18.9 (build 11.0.2+9, mixed mode)配置主机名及添加hosts解析
ELK01节点设置
# hostnamectl set-hostname ELK01# hostnameELK01ELK02节点设置
# hostnamectl set-hostname ELK02# hostnameELK02ELK03节点设置
# hostnamectl set-hostname ELK03# hostnameELK03三台节点都添加hosts解析
# vim /etc/hosts10.0.0.40 ELK0110.0.0.41 ELK0210.0.0.42 ELK03配置时间同步（所有节点都需配置）
# ln -svf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime#下载ntpdate工具# apt -y install ntpdate# ntpdate ntp.aliyun.com# echo "*/5 * * * * /usr/sbin/ntpdate ntp.aliyun.com" > /var/spool/cron/crontabs/root系统配置（所有节点都需配置）
优化系统参数
# vim /etc/sysctl.conf# ES 需要大量文件描述符来处理索引和网络连接，建议设置为较高值：fs.file-max = 655360# ES 使用 mmap 技术加载索引，需增大虚拟内存区域限制：vm.max_map_count = 2147483642# 禁用交换空间(swap分区)vm.swappiness = 1 # 网络参数优化net.ipv4.tcp_keepalive_time = 600net.ipv4.tcp_keepalive_intvl = 60net.ipv4.tcp_keepalive_probes = 10net.ipv4.tcp_max_syn_backlog = 4096net.core.somaxconn = 4096net.core.netdev_max_backlog = 16384net.core.rmem_max = 262144net.core.wmem_max = 262144 # 使参数生效# sysctl -p /etc/sysctl.conf # 查询参数，验证是否生效# sysctl -q vm.max_map_countvm.max_map_count = 2147483642创建es存储目录
# mkdir -p /data/elasticsearch/# mkdir -p /var/log/elasticsearch/创建es用户
# useradd elasticsearch# id elasticsearchuid=2002(elasticsearch) gid=2003(elasticsearch) groups=2003(elasticsearch) # 授权# chown elasticsearch:elasticsearch -R /data/elasticsearch/# chown elasticsearch:elasticsearch -R /var/log/elasticsearch/添加es用户的限制
# vim /etc/security/limits.conf# 最大文件描述符数elasticsearch hard nofile 655360elasticsearch soft nofile 655360# 最大进程数elasticsearch hard nproc 8192elasticsearch soft nproc 8192# 锁定内存限制elasticsearch hard memlock unlimitedelasticsearch soft memlock unlimited下载并配置ElasticSearch（所有节点操作）
官方下载地址：https://www.elastic.co/downloads/past-releases#elasticsearch
下载解压ElasticSearch
# 下载ElasticSearch# wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.26-linux-x86_64.tar.gz# ll elasticsearch-7.17.26-linux-x86_64.tar.gz-rw-r--r-- 1 root root 325410598 Dec32024 elasticsearch-7.17.26-linux-x86_64.tar.gz# 解压# tar -xvf elasticsearch-7.17.26-linux-x86_64.tar.gz# 移动到/data目录下# mv elasticsearch-7.17.26 /data/# 授权# chown elasticsearch:elasticsearch -R /data/elasticsearch-7.17.26/# 创建软连接# ln -s /data/elasticsearch-7.17.26 /usr/local/es7# ll /usr/local/es7lrwxrwxrwx 1 root root 27 Jun 14 21:50 /usr/local/es7 -> /data/elasticsearch-7.17.26/修改配置文件
# vim /usr/local/es7/config/elasticsearch.ymlcluster.name: es7path.data: /data/elasticsearchpath.logs: /var/log/elasticsearchnetwork.host: 0.0.0.0http.port: 9200discovery.seed_hosts: ["ELK01", "ELK02", "ELK03"]cluster.initial_master_nodes: ["ELK01", "ELK02", "ELK03"]# 根据节点名称来进行修改此字段# node.name: ELK01# node.name: ELK02node.name: ELK03启动ElasticSearch集群（三个节点都执行）
创建systemd文件
# vim /lib/systemd/system/es.serviceDescription=elasticsearch serviceDocumentation=https://www.cnblogs.com/huangSir-devopsAfter=network.target auditd.service LimitMEMLOCK=infinityUser=elasticsearchExecStart=/usr/local/es7/bin/elasticsearchTimeoutStopSec=0TimeoutStartSec=0 WantedBy=multi-user.target加载systemd文件
# systemctl daemon-reload启动es
# systemctl start es# systemctl status es● es.service - elasticsearch service Loaded: loaded (/lib/systemd/system/es.service; disabled; vendor preset: enabled) Active: active (running) since Sat 2025-06-14 21:51:19 CST; 34s ago Docs: https://www.cnblogs.com/huangSir-devops Main PID: 1420 (java) Tasks: 43 (limit: 4519) Memory: 2.1G CPU: 54.474s CGroup: /system.slice/es.service ├─1420 /usr/local/es7/jdk/bin/java -Xshare:auto -Des.networkaddress.cache.ttl=60 -Des.networkaddress.cache.negative.ttl=10 -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djna.nosys=true -XX:-OmitStackTraceInFastThrow -XX:+ShowCodeDetailsInExceptionMessages -Dio.netty.noUnsafe=true -Dio.netty.noKeySetOptimization=true -Dio.netty.recycler.maxCapacityPerThread=0 -Dio.netty.allocator.numDirectArenas=0 -Dlog4j.shutdownHookEnabled=false -Dlog4j2.disable.jmx=true -Dlog4j2.formatMsgNoLookups=true -Djava.locale.providers=SPI,COMPAT--add-opens=java.base/java.io=ALL-UNNAMED -Djava.security.manager=allow -XX:+UseG1GC -Djava.io.tmpdir=/tmp/elasticsearch-1928841724883000105 -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=data -XX:ErrorFile=logs/hs_err_pid%p.log "-Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m" -XX:+UnlockDiagnosticVMOptions -XX:G1NumCollectionsKeepPinned=10000000 -Xms1937m -Xmx1937m -XX:MaxDirectMemorySize=1016070144 -XX:G1HeapRegionSize=4m -XX:InitiatingHeapOccupancyPercent=30 -XX:G1ReservePercent=15 -Des.path.home=/usr/local/es7 -Des.path.conf=/usr/local/es7/config -Des.distribution.flavor=default -Des.distribution.type=tar -Des.bundled_jdk=true -cp "/usr/local/es7/lib/*" org.elasticsearch.bootstrap.Elasticsearch └─1603 /usr/local/es7/modules/x-pack-ml/platform/linux-x86_64/bin/controllerJun 14 21:51:47 ELK01 elasticsearch: starting ...Jun 14 21:51:47 ELK01 elasticsearch: persistent cache index loadedJun 14 21:51:47 ELK01 elasticsearch: deprecation component startedJun 14 21:51:47 ELK01 elasticsearch: publish_address {10.0.0.40:9300}, bound_addresses {[::]:9300}Jun 14 21:51:47 ELK01 elasticsearch: creating template [.monitoring-alerts-7] with version Jun 14 21:51:47 ELK01 elasticsearch: 检查集群节点
# 检查集群节点# curl 10.0.0.40:9200/_cat/nodes10.0.0.40 22 97 12 0.41 0.38 0.26 cdfhilmrstw * ELK0110.0.0.426 97 13 0.30 0.26 0.15 cdfhilmrstw - ELK0310.0.0.41 21 97 12 0.23 0.19 0.11 cdfhilmrstw - ELK02# 查看集群是否健康# curl 10.0.0.40:9200/_cat/health?vepoch timestamp cluster status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent1749909982 14:06:22es7 green 3 3 4 2 0 0 0 0 - 100.0%记一下：下一次可以写一下Docker和K8s搭建ES的集群
来源：程序园用户自行投稿发布，如果侵权，请联系站长删除
免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！
页:
[1]