java - Elasticsearch 在 Ubuntu 16.04 中停止工作

Question

按照提供的信息 here，我在 nextcloud 中成功安装了 elasticsearch 和 fulltextsearch .

搜索工作正常。最近发现elasticsearch服务无法正常启动。当我最初手动重新启动时，服务似乎运行良好。

sudo service elasticsearch status
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
   Active: active (running) since Di 2018-04-10 12:10:15 CEST; 1s ago
     Docs: http://www.elastic.co
 Main PID: 5958 (java)
    Tasks: 6
   Memory: 432.7M
      CPU: 1.391s
   CGroup: /system.slice/elasticsearch.service
           └─5958 /usr/bin/java -Xms3g -Xmx3g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djna.nosys=t...

但是大约 10 秒后它停止了:

sudo service elasticsearch status
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Di 2018-04-10 12:10:23 CEST; 24s ago
     Docs: http://www.elastic.co
  Process: 5958 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
 Main PID: 5958 (code=exited, status=1/FAILURE)

Apr 10 12:10:15 Ubuntu-Server systemd[1]: Started Elasticsearch.
Apr 10 12:10:23 Ubuntu-Server systemd[1]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE
Apr 10 12:10:23 Ubuntu-Server systemd[1]: elasticsearch.service: Unit entered failed state.
Apr 10 12:10:23 Ubuntu-Server systemd[1]: elasticsearch.service: Failed with result 'exit-code'.

我正在 Ubuntu 16.04 上使用 java 版本运行 elasticsearch 版本 6.2.3

java -version
java version "1.8.0_161"
Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)

我想提供更详细的错误日志，但我不知道在哪里搜索它们。请告诉我需要哪些信息以及在哪里可以找到它。

非常感谢您的帮助。

Answer 1

您是否尝试过升级虚拟内存最大映射数？ https://www.elastic.co/guide/en/elasticsearch/reference/current/vm-max-map-count.html

如果没有这个更改，ES 将在启动后立即关闭。

如果是这样，请尝试从日志中发布更多信息。
日志应位于此处:

/var/log/elasticsearch
/var/log/syslog

或输入:

journalctl -xe 并找到有关以下内容的信息:“Elasticsearch (....) exited”