Obsidian/Recognition/Programing/ELK/ELK 폐쇄망 설치(New).md

52 lines
1.1 KiB
Markdown
Raw Normal View History

2024-03-29 08:36:47 +00:00
##### 도커 설치
[[Docker 폐쇄망 설치]]
2024-02-11 12:29:05 +00:00
2024-03-29 08:36:47 +00:00
```shell
2024-02-11 12:29:05 +00:00
# ELK 도커 이미지 로드
docker load -i /home/gmt/SACP-INSTALL/docimgs/docimg_elasticserch.tar
docker load -i /home/gmt/SACP-INSTALL/docimgs/docimg_kibana.tar
docker load -i /home/gmt/SACP-INSTALL/docimgs/docimg_logstash.tar
# ELK 도커 설치
cd /home/gmt/SACP-INSTALL/elk/
docker-compose build && docker-compose up -d
# Elasticsearch 로그 확인
docker logs es01
docker exec -it es01 bash
docker exec -it --user root es01 bash
2024-06-29 03:05:20 +00:00
# Kibana DevTool에서 샤드수 제한 늘리기
PUT /_cluster/settings
{
"persistent": {
"cluster.max_shards_per_node": "5000"
}
}
https://velog.io/@diane_at_work/Elasticsearch-auto-rollover-%EC%A0%81%EC%9A%A9
2024-02-11 12:29:05 +00:00
```
- 오류시 확인
```shell
# ELK 실행 오류시
2024-03-29 08:36:47 +00:00
...
root "cause: java.nio.file.NoSuchFileException: /usr/share/elasticsearch/data/nodes/0/node.lock"
...
## elk data 폴더 uid를 container uid와 일치 시켜야 함.
chown -R 1000:0 /data/elk_data/
2024-02-11 12:29:05 +00:00
# 도커 서비스 실행 안되는 경우
cd /var/lib/docker/
rm -rf /var/lib/docker
```