尝试启动Elasticsearch时遇到错误并立即停止的问题。

我启动了Elasticsearch，但似乎它没有成功启动。因此，我查看了/var/log/elasticsearch/elasticsearch.log中的日志记录。

[2017-09-28T07:44:50,362][INFO ][o.e.n.Node               ] [5MEDJRz] starting ...
[2017-09-28T07:44:50,766][INFO ][o.e.t.TransportService   ] [5MEDJRz] publish_address {10.0.2.15:9300}, bound_addresses {[::]:9300}
[2017-09-28T07:44:50,829][INFO ][o.e.b.BootstrapChecks    ] [5MEDJRz] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
[2017-09-28T07:44:50,850][ERROR][o.e.b.Bootstrap          ] [5MEDJRz] node validation exception
[2] bootstrap checks failed
[1]: max number of threads [1024] for user [elasticsearch] is too low, increase to at least [2048]
[2]: system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk
[2017-09-28T07:44:50,860][INFO ][o.e.n.Node               ] [5MEDJRz] stopping ...
[2017-09-28T07:44:50,995][INFO ][o.e.n.Node               ] [5MEDJRz] stopped
[2017-09-28T07:44:50,995][INFO ][o.e.n.Node               ] [5MEDJRz] closing ...
[2017-09-28T07:44:51,020][INFO ][o.e.n.Node               ] [5MEDJRz] closed

启动后立刻就崩溃了呀！

我来调查一下。

第一个

[2]: 系统调用过滤器安装失败；请检查日志并修复您的配置，或自担风险禁用系统调用过滤器。

请参考以下链接了解有关系统调用过滤器检查的详细信息：
https://www.elastic.co/guide/cn/elasticsearch/reference/current/system-call-filter-check.html

嗯嗯，作为这个的对应措施，在/etc/elasticsearch/elasticsearch.yml文件中添加以下内容即可：
bash
bootstrap.system_call_filter: false

第二个

【1】用户【elasticsearch】的最大线程数【1024】太低，请增加至少到【2048】。

请参考此链接：https://www.elastic.co/guide/en/elasticsearch/reference/master/max-number-of-threads.html

这种方法可能不正确，但我在/etc/sysconfig/init中添加了以下内容：
bash
ulimit -n 65536

结果…

太棒了！