使用docker-compose安裝elasticsearch和kibana

安裝docker-compose
sudo curl -L "https://github.com/docker/compose/releases/download/1.23.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose
docker-compose --version

在/etc/sysctl.conf中添加vm.max_map_count=262144
vim /etc/sysctl.conf
vm.max_map_count=262144

#使配置生效
sysctl -p

創建volume掛載目錄，並修改目錄用戶和用戶組。由於elasticsearch6之後不允許使用root啓用，所以需要修改/usr/share/elasticsearch/data的權限爲1000
mkdir -pv /usr/share/elasticsearch/data
chown 1000:1000 /usr/share/elasticsearch/data

編寫部署文件
mkdir /usr/local/elasticsearch-kibana
cd elasticsearch-kibana/
vim docker-compose.yml

version: '2.2'
services:
  elasticsearch:
    image: elasticsearch:6.6.2
    container_name: elasticsearch
    environment:
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
    volumes:
      - /usr/share/elasticsearch/data:/usr/share/elasticsearch/data
      - ./elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
    ports:
      - 9200:9200
      - 9300:9300
    mem_limit: 1024m
    restart: always
  kibana:
    image: kibana:6.6.2
    container_name: kibana
    ports:
      - 5601:5601
    depends_on:
      - elasticsearch
    mem_limit: 512m
    restart: always

vim elasticsearch.yml

#集羣名
cluster.name: "elasticsearch"
# 允許外部網絡訪問
network.host: 0.0.0.0
#支持跨域
http.cors.enabled: true
#支持所有域名
http.cors.allow-origin: "*"
# 關閉xpack安全校驗，在kibana中使用就不需要輸入賬號密碼
xpack.security.enabled: false

後臺啓動elasticsearch和kibana容器  

docker-compose up -d

停止      docker-compose down
停止並卸載volumes      docker-compose down -v

檢查elasticsearch是否啓動成功

curl 127.0.0.1:9200 

訪問kibana

http://主機ip:5601

點擊 Dev Tools菜單

再點擊下圖中的三角形運行查詢語句

 

官方安裝教程https://www.elastic.co/guide/en/elasticsearch/reference/6.4/docker.html