安装JDK1.8

官网下载jdk1.8，接着上传JDK后进行安装：

rpm -ivh jdk-8u211-linux-x64.rpm

下载ElasticSearch6.7.2并解压

cd /usr/local
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.7.2.tar.gz
tar -zxvf elasticsearch-6.7.2.tar.gz
mv ./elasticsearch-6.7.2 ./elasticsearch

修改配置文件

vim /usr/local/elasticsearch/config/elasticsearch.yml

如下内容需要根据需求进行更改：

cluster.name: yeqinfang
node.name: node-1
network.host: 0.0.0.0
http.port: 9244
transport.tcp.port: 9366
transport.publish_port: 9366
transport.bind_host: 0.0.0.0
transport.publish_host: 0.0.0.0
transport.host: 0.0.0.0
discovery.zen.ping.unicast.hosts: [“10.88.1.119:9300”]
http.cors.enabled: true
http.cors.allow-origin: “*”

创建ELK用户和组

创建

groupadd elk
useradd -g elk elk
chown -R elk:elk /usr/local/elasticsearch

启动ElasticSearch

启动

su elk
/usr/local/elasticsearch/bin/elasticsearch -d

设置开机启动（root操作）

cd /usr/local/elasticsearch

输入一下内容：
/usr/local/elasticsearch/startup.sh

验证

ps -aux|grep elasticsearch