ES常见错误
案例一
[2018-06-20T02:35:47,152][INFO ][o.e.b.BootstrapChecks ] [SUcoFrg] bound or publishing to a non-loopback address, enforcing bootstrap checks
ERROR: [3] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max number of threads [3802] for user [elsearch] is too low, increase to at least [4096]
[3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2018-06-20T02:35:47,170][INFO ][o.e.n.Node ] [SUcoFrg] stopping ...
[2018-06-20T02:35:47,316][INFO ][o.e.n.Node ] [SUcoFrg] stopped
[2018-06-20T02:35:47,316][INFO ][o.e.n.Node ] [SUcoFrg] closing ...
[2018-06-20T02:35:47,336][INFO ][o.e.n.Node ] [SUcoFrg] closed
原因：虚拟机限制用户的执行内存
解决：
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max number of threads [3802] for user [elsearch] is too low, increase to at least [4096]
step1:修改安全限制配置文件
su root
vi /etc/security/limits.conf
备注：使用最高权限 修改安全配置 在文件末尾加入
# End of file
elsearch hard nofile 65536
elsearch soft nofile 65536
* soft nproc 4096
* hard nproc 4096
备注： elsearch为用户名 可以是使用*进行通配
nofile 最大打开文件数目
nproc 最大打开线程数目
[3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
step2:修改系统配置文件
vi /etc/sysctl.conf
备注：行末加上vm.max_map_count = 655360 ，esc +：wq保存退出
vm.max_map_count = 655360
备注：vm.max_map_count = 655360 值大于错误提示值
step3:重启
su elsearch
/elasticsearch-6.3.0/bin/elasticsearch