1.elasticsearch啟動問題：

如果elasticsearch開啟https登錄則第一次啟動的時候需要前臺啟動，前臺啟動的時候會自己創(chuàng)建相應(yīng)的token等登錄信息,如果是后臺啟動則沒有這些登錄信息：

./elasticsearch

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
? Elasticsearch security features have been automatically configured!
? Authentication is enabled and cluster connections are encrypted.

??  Password for the elastic user (reset with `bin/elasticsearch-reset-password -u elastic`):
  uQIrmGkSPEDybGehN7Ow

??  HTTP CA certificate SHA-256 fingerprint:
  c5ef1227cf14a593d41a24388b4d710dc819c6dd4c3accd0a354b49ac6f28b4f

??  Configure Kibana to use this cluster:
? Run Kibana and click the configuration link in the terminal when Kibana starts.
? Copy the following enrollment token and paste it into Kibana in your browser (valid for the next 30 minutes):
  eyJ2ZXIiOiI4LjEyLjIiLCJhZHIiOlsiMTAuMTAwLjIwOC4yMTo5MjAwIl0sImZnciI6ImM1ZWYxMjI3Y2YxNGE1OTNkNDFhMjQzODhiNGQ3MTBkYzgxOWM2ZGQ0YzNhY2NkMGEzNTRiNDlhYzZmMjhiNGYiLCJrZXkiOiJKelg2Wkk0QmU5cXRJWmF5VzRCbzotOGVyTEUtbVJyT0ZTbzh1UTktQkV3In0=

??  Configure other nodes to join this cluster:
? On this node:
  ? Create an enrollment token with `bin/elasticsearch-create-enrollment-token -s node`.
  ? Uncomment the transport.host setting at the end of config/elasticsearch.yml.
  ? Restart Elasticsearch.
? On other nodes:
  ? Start Elasticsearch with `bin/elasticsearch --enrollment-token <token>`, using the enrollment token that you generated.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2.參數(shù)設(shè)置問題?

1.報錯：max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
解決：
vim /etc/sysctl.conf
在文件末尾添加以下一行內(nèi)容：vm.max_map_count=262144
使文件立即生效：sudo sysctl -p
?
2.報錯：max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]
解決：
vim /etc/security/limits.conf
在文件最后面添加下面內(nèi)容
* soft nofile 65535
* hard nofile 65535

elasticsearch-setup-passwords interactive設(shè)置密碼時報錯：?

[deployer@master1 bin]$ ./elasticsearch-setup-passwords interactive

Failed to authenticate user 'elastic' against http://xxxxxx:9200/_security/_authenticate?pretty
Possible causes include:
 * The password for the 'elastic' user has already been changed on this cluster
 * Your elasticsearch node is running against a different keystore
   This tool used the keystore at /usr/local/ES/elasticsearch-8.12.2/config/elasticsearch.keystore

You can use the `elasticsearch-reset-password` CLI tool to reset the password of the 'elastic' user


ERROR: Failed to verify bootstrap password, with exit code 78

?

解決：
刪除 .security-7 索引?

刪除好像沒什么用，只能通過命令：[deployer@master1 bin]$ ./elasticsearch-reset-password -u elastic -i 來重新自定義elastic的用戶密碼。

3.kibana設(shè)置

kibana配置：

server.port: 5601 #默認(rèn)端口
server.host: “0.0.0.0” #對外訪問
elasticsearch.hosts: [“http://10.10.10.10:9200”] #elasticsearch地址
i18n.locale: "zh-CN" #設(shè)置中文

后臺啟動：

[root@master1 node_modules]# cd /usr/local/ES
[root@master1 ES]# ls
elasticsearch-8.12.2 ?elasticsearch-8.12.2-linux-x86_64.tar.gz ?elasticsearch-head-master ?kibana-8.12.2 ?kibana-8.12.2-linux-x86_64.tar.gz ?master.zip
[root@master1 ES]# cd kibana-8.12.2
nohup bin/kibana &

4. 如果出現(xiàn)集群"健康值:未連接"? 請參考?<<<

elasticsearch-head-master也需要使用普通用戶啟動。
如果之前使用過root用戶啟動過elasticsearch-head-master或者elasticsearch，需要將elasticsearch-head-master和elasticsearch重新添加普通用戶屬組和屬主。因為使用root啟動之后有部分文件的屬組合屬主變成了root。
（先停掉elasticsearch-head-master和elasticsearch然后再賦權(quán)）

[root@master1 ES]# ls
elasticsearch-8.12.2  elasticsearch-8.12.2-linux-x86_64.tar.gz  elasticsearch-head-master  kibana-8.12.2  kibana-8.12.2-linux-x86_64.tar.gz  master.zip
[root@master1 ES]# chown deployer:deployer -R elasticsearch-head-master
[root@master1 ES]# chown deployer:deployer -R elasticsearch-8.12.2

注意：elasticsearch-8.12.2啟動后默認(rèn)開啟了密碼和ssl設(shè)置，需要將true改成false

然后重啟啟動elasticsearch-head-master和elasticsearch

報錯：

received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/xxxxx:9200, remoteAddress=/xxxx:57926}

5.ES8默認(rèn)開啟了ssl認(rèn)證，導(dǎo)致無法訪問9200端口

elasticsearch.yml配置:xpack.security.enabled:把true改成false

6.kibana設(shè)置賬號密碼

kibana沒有自己的登錄賬號需要使用elasticsearch中添加的賬號才行

vim /etc/kibana/kibana.yml

elasticsearch.username: "kibana"
elasticsearch.password: "123456"
用戶說明：
elastic：內(nèi)置超級用戶
kibana：僅可用于kibana用來連接elasticsearch并與之通信, 不能用于kibana登錄logstash_system：用于Logstash在Elasticsearch中存儲監(jiān)控信息時使用

?kibana安裝后驗證：

# 查看所有節(jié)點
GET _cat/nodes
 
# 查看customer索引數(shù)據(jù)
GET customer/_search

elasticsearch-head登錄截圖

文章來源地址http://www.zghlxwxcb.cn/news/detail-843965.html

到了這里，關(guān)于elasticsearch+kibana安裝部分問題：的文章就介紹完了。如果您還想了解更多內(nèi)容，請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！