一、单节点
1、优化
vim /etc/security/limits.conf
* soft nofile 102400
* hard nofile 102400
* soft nproc 102400
* hard nproc 102400
需要退出当前终端,使用命令ulimit -a查看是否生效
2、优化sysctl参数
vim sysctl.conf
vm.max_map_count = 262144
systctl -p
3、编写docker-compose的配置yaml
创建目录
mkdir esdata
chown -R 1000:1000 esdata
4、无验证
version: '3.8'
services:
elasticsearch:
image: xxxxx/library/elasticsearch:9.3.2
container_name: es
restart: always
environment:
- discovery.type=single-node
- xpack.security.enabled=false
- xpack.security.enrollment.enabled=false
- ES_JAVA_OPTS=-Xms2g -Xmx2g
ports:
- "9200:9200"
volumes:
- ./es_data:/usr/share/elasticsearch/data
networks:
- es_net
kibana:
image: xxxx/library/kibana:9.3.2
container_name: kibana
restart: always
environment:
- ELASTICSEARCH_HOSTS=http://es:9200
ports:
- "5601:5601"
depends_on:
- elasticsearch
networks:
- es_net
networks:
es_net:
执行命令,创建docker
docker-compose -f es-compose.yaml up -d
5、带验证
version: '3.8'
services:
elasticsearch:
image: xxxx/library/elasticsearch:9.3.4
container_name: es
restart: always
environment:
- discovery.type=single-node
# 开启安全认证
- xpack.security.enabled=true
- xpack.security.enrollment.enabled=true
# 设置 elastic 超级管理员密码
- ELASTIC_PASSWORD=Fintech@988.
- ES_JAVA_OPTS=-Xms2g -Xmx2g
ports:
- "9200:9200"
volumes:
- /data/dockers_data/esdata:/usr/share/elasticsearch/data
kibana:
image: xxxx/library/kibana:9.3.4
container_name: kibana
restart: always
environment:
- ELASTICSEARCH_HOSTS=http://es:9200
# Kibana 连接 ES 的账号密码
- ELASTICSEARCH_USERNAME=kibana_system
- ELASTICSEARCH_PASSWORD=Es@988.
ports:
- "5601:5601"
depends_on:
- elasticsearch
注意:es中设置的超级管理员elastic的密码,下面kibana连接es的时候不允许使用elastic账号,因为elastic的账号权限远远大于kibana_system。因此,需要等es启动后需要进入容器修改kubana_system的密码。
docker exec -it es /bin/bash
#执行如下命令(一定要等es启动成功后运行)
/usr/share/elasticsearch/bin/elasticsearch-reset-password -i -u kibana_system
6、打开kibana
http://localhost:5601/
使用elastic用户名及Fintech@988.密码登录