前置说明版本信息 适用于8.19.xelasticsearch8.19.9kibana8.19.9elasticsearch-analysis-ik8.19.9部署模式容器化部署、单机版、HTTP模式、开启安全认证端口服务作用9200ElasticsearchHTTP REST API端口用于客户端如 Kibana、curl、应用访问 ES 数据9300ElasticsearchTransport 协议端口用于 ES 集群内部节点间通信数据同步、选举等5601KibanaWeb 界面端口用于浏览器访问 Kibana UI部署ES1. 创建容器网络docker network create es-net2. 创建elasticsearch.ymlcat /home/mpp/elasticsearch/elasticsearch.yml EOF cluster.name: docker-cluster node.name: elasticsearch discovery.type: single-node network.host: 0.0.0.0 # 开启安全认证 xpack.security.enabled: true # 关闭 HTTP 和 Transport 层的 SSL 开关 xpack.security.http.ssl.enabled: false xpack.security.transport.ssl.enabled: false # 内存锁定 bootstrap.memory_lock: true EOF3.启动es容器docker run -d \ --name elasticsearch \ --network es-net \ -p 9200:9200 \ -p 9300:9300 \ --privileged \ --security-opt seccompunconfined \ --ulimit nofile65536:65536 \ --ulimit nproc4096:4096 \ -e ES_JAVA_OPTS-Xms1g -Xmx1g \ -v /home/mpp/elasticsearch/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro \ -v es-data:/usr/share/elasticsearch/data \ elasticsearch:8.19.94.设置用户密码elastic 超管bin/elasticsearch-reset-password -u elastic -i --url http://127.0.0.1:92005.设置kibana用户密码bin/elasticsearch-reset-password -u kibana_system -i --url http://127.0.0.1:9200部署Kibana1. 创建kibana.ymlcat /home/mpp/elasticsearch/kibana.yml EOF server.name: kibana server.host: 0.0.0.0 server.port: 5601 # Elasticsearch 的访问地址 elasticsearch.hosts: [ http://elasticsearch:9200 ] elasticsearch.username: kibana elasticsearch.password: qF*sUJ96bCacsgmas8eh # 语言设置为中文 i18n.locale: zh-CN EOF2.启动Kibana容器docker run -d \ --name kibana \ --network es-net \ -p 5601:5601 \ --privileged \ --security-opt seccompunconfined \ -v /home/mpp/elasticsearch/kibana.yml:/usr/share/kibana/config/kibana.yml:ro \ kibana:8.19.93.浏览器访问http://XXX.XXX.XXX.XXX:5601安装IK分词器官方包地址https://release.infinilabs.com/analysis-ik/stable/1.解压官方zip包unzip /home/mpp/elasticsearch/elasticsearch-analysis-ik-8.19.9.zip -d /home/mpp/elasticsearch/ik_tmp/2.拷贝到docker容器docker exec -it --user root elasticsearch mkdir -p /usr/share/elasticsearch/plugins/ikdocker cp /home/mpp/elasticsearch/ik_tmp/. elasticsearch:/usr/share/elasticsearch/plugins/ik/3.修改权限docker exec -it --user root elasticsearch chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/plugins/ik4.重启容器docker restart elasticsearch
