es安装

安装

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.17.1-linux-x86_64.tar.gz

参考：
https://www.cnblogs.com/shamo89/p/18504053
https://blog.csdn.net/u012899618/article/details/130383429

• 解压
  tar -zxvf elasticsearch-8.17.1-linux-x86_64.tar.gz -C /usr/local

vi /usr/local/elasticsearch-8.17.1/config/elasticsearch.yml
path.data: /home/version/es/data
path.logs: /home/version/es/logs
//绑定到0.0.0.0，允许任何ip来访问
network.host: 0.0.0.0

vi /usr/local/elasticsearch-8.17.1/config/jvm.options
-Xms4g
-Xmx4g
/usr/local/elasticsearch-8.17.1/bin/elasticsearch

安装kibana

都docker路线

先确保docker跑起来了
$ systemctl enable docker
$ systemctl start docker

最简单方便的是使用Docker一键安装ElasticSearch+Kibana
curl -fsSL https://elastic.co/start-local | sh

只能在内网访问
curl -X GET “localhost:9200/”
139.224.163.31

docker stop es-local-dev
docker rm es-local-dev

docker run -d
–name es-local-dev
-p 9200:9200
-p 9300:9300
–memory=“2g”
–cpus=“1”
-e “xpack.security.enabled=true”
-e “xpack.security.enrollment.enabled=true”
-e “discovery.type=single-node”
-e “network.host=0.0.0.0”
-v /home/version/elasticsearch/data:/usr/share/elasticsearch/data
docker.elastic.co/elasticsearch/elasticsearch:8.17.1

查看状态
docker ps -a ，是Exited 是已经退出了
docker logs es-local-dev 查看原因
原来是没有足够的空间

docker stop kibana-local-dev
docker rm kibana-local-dev
docker run -d
–name kibana-local-dev
-p 5601:5601
-e “SERVER_HOST=0.0.0.0”
docker.elastic.co/kibana/kibana:8.17.1
进入docker的es
/usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive
然后
Changed password for user [apm_system]
Changed password for user [kibana_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic] 这几个密码全改了