ELK5.x安装过程中所遇到的问题

问题一

[2017-11-30T17:37:20,165][WARN ][o.e.b.JNANatives ] unable to install syscall filter:
java.lang.UnsupportedOperationException: seccomp unavailable: requires kernel 3.5+ with CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER compiled in

1	解决：使用linux内核3.5版本，不更换也可以。

问题二
[2017-11-30T17:37:24,329][WARN ][o.e.b.BootstrapChecks ] [m42Pcik] max number of threads [1024] for user [logtest] is too low, increase to at least [2048]

解决：切换到root用户，进入limits.d目录下修改配置文件。

vi /etc/security/limits.d/90-nproc.conf 

修改如下内容：
* soft nproc 1024
#修改为
* soft nproc 2048

问题三
[2017-11-30T17:04:38,295][WARN ][o.e.b.BootstrapChecks ] [m42Pcik] max file descriptors [65535] for elasticsearch process is too low, increase to at least [65536]

解决：切换到root用户，编辑limits.conf 添加类似如下内容

vi /etc/security/limits.conf 

添加如下内容:
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096

问题四
max number of threads [1024] for user [lish] likely too low, increase to at least [2048]

解决：切换到root用户修改配置sysctl.conf

vi /etc/sysctl.conf 

添加下面配置：
vm.max_map_count=655360
并执行命令：
sysctl -p

问题五
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to obtain node locks, tried [[/usr/local/elasticsearch-5.2.0/data/my-application]] with lock id [0]; maybe these locations are not writable or multiple nodes were started without increasing

1
2
3

解决：
cd /usr/local/elasticsearch-5.2.0/data
rm -rf nodes/