ERROR:?[2]?bootstrap?checks?failed.?You?must?address?the?points?described?in?the?following?[2]?lines?before?starting?Elasticsearch. bootstrap?check?failure?[1]?of?[2]:?max?file?descriptors?[4096]?for?elasticsearch?process?is?too?low,?increase?to?at?least?[65535] bootstrap?check?failure?[2]?of?[2]:?max?virtual?memory?areas?vm.max_map_count?[65530]?is?too?low,?increase?to?at?least?[262144] ?

主要是文件权限与内存大小问题： ?

elasticsearch用户拥有的可创建文件描述的权限太低，至少需要65536,

?????????????????处理办法:???#切换到root用户修改

??????????????????????????????????vim?/etc/security/limits.conf???# 在最后面追加下面内容

???????????????????????????????????elk hard nofile?65536

??????????????????????????????????elk soft nofile?65536??????????????#***??是启动elk的用户

?max_map_count文件包含限制一个进程可以拥有的VMA(虚拟内存区域)的数量?

?????????????????处理办法:????#切换到root用户修改

??????????????????????????????????vim?/etc/sysctl.conf ???# 在最后面追加下面内容

??????????????????????????????????vm.max_map_count=655360

?????????????????????????????????执行??sysctl -p