关键词：
如下是我自行搭建的一个elk群集，当我在启动集群的时候，一个节点启动失败，我对比了了集群的其他机器配置，排除了配置问题，结合操作记录，结合输出信息，我怀疑是某个文件权限问题，于是我检查了相关权限，系日志文件造成，我删除执行命令的输出日志，重新以非root账号启动，elk成功启动，如下为输出代码，希望后面大家有遇到的可以参考试试来解决问题
[[email protected] elasticsearch-6.5.0]$ ./bin/elasticsearch -d
*[[email protected] elasticsearch-6.5.0]$ 2018-12-20 10:09:14,510 main ERROR RollingFileManager (/usr/local/elasticsearch-6.5.0/logs/elk.log) java.io.FileNotFoundException: /usr/local/elasticsearch-6.5.0/logs/elk.log (Permission denied) java.io.FileNotFoundException: /usr/local/elasticsearch-6.5.0/logs/elk.log (Permission denied)
at java.io.FileOutputStream.open0(Native Method)
at java.io.FileOutputStream.open(FileOutputStream.java:270)
at java.io.FileOutputStream.<init>(FileOutputStream.java:213)
at java.io.FileOutputStream.<init>(FileOutputStream.java:133)
at org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory.createManager(RollingFileManager.java:640)
at org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory.createManager(RollingFileManager.java:608)
at org.apache.logging.log4j.core.appender.AbstractManager.getManager(AbstractManager.java:113)
at org.apache.logging.log4j.core.appender.OutputStreamManager.getManager(OutputStreamManager.java:114)
at org.apache.logging.log4j.core.appender.rolling.RollingFileManager.getFileManager(RollingFileManager.java:188)
at org.apache.logging.log4j.core.appender.RollingFileAppender$Builder.build(RollingFileAppender.java:145)
at org.apache.logging.log4j.core.appender.RollingFileAppender$Builder.build(RollingFileAppender.java:61)
at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:123)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:959)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:899)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:891)
at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:514)
at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:238)
at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:250)
at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:547)
at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:263)
at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:234)
at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:127)
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:302)
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:136)
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:127)
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
at org.elasticsearch.cli.Command.main(Command.java:90)
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93)
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:86)
2018-12-20 10:09:14,514 main ERROR Could not create plugin of type class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateException: ManagerFactory [org.apache.logging.log4j.cor[email protected]437da279] unable to create manager for [/usr/local/elasticsearch-6.5.0/logs/elk.log] with data [org.apache.log[email protected]23c30a20[pattern=/usr/local/elasticsearch-6.5.0/logs/elk-%dyyyy-MM-dd-%i.log.gz, append=true, bufferedIO=true, bufferSize=8192, policy=CompositeTriggeringPolicy(policies=[TimeBasedTriggeringPolicy(nextRolloverMillis=0, interval=1, modulate=true), SizeBasedTriggeringPolicy(size=134217728)]), strategy=DefaultRolloverStrategy(min=-2147483648, max=2147483647, useMax=false), advertiseURI=null, layout=[%dISO8601][%-5p][%-25c1.] [%nodename]%marker %.-10000m%n, filePermissions=null, fileOwner=null]] java.lang.IllegalStateException: ManagerFactory [org.apache.logging.log4j.cor[email protected]437da279] unable to create manager for [/usr/local/elasticsearch-6.5.0/logs/elk.log] with data [org.apache.log[email protected]23c30a20[pattern=/usr/local/elasticsearch-6.5.0/logs/elk-%dyyyy-MM-dd-%i.log.gz, append=true, bufferedIO=true, bufferSize=8192, policy=CompositeTriggeringPolicy(policies=[TimeBasedTriggeringPolicy(nextRolloverMillis=0, interval=1, modulate=true), SizeBasedTriggeringPolicy(size=134217728)]), strategy=DefaultRolloverStrategy(min=-2147483648, max=2147483647, useMax=false), advertiseURI=null, layout=[%dISO8601][%-5p][%-25c1.] [%nodename]%marker %.-10000m%n, filePermissions=null, fileOwner=null]]
at org.apache.logging.log4j.core.appender.AbstractManager.getManager(AbstractManager.java:115)
at org.apache.logging.log4j.core.appender.OutputStreamManager.getManager(OutputStreamManager.java:114)
at org.apache.logging.log4j.core.appender.rolling.RollingFileManager.getFileManager(RollingFileManager.java:188)
at org.apache.logging.log4j.core.appender.RollingFileAppender$Builder.build(RollingFileAppender.java:145)
at org.apache.logging.log4j.core.appender.RollingFileAppender$Builder.build(RollingFileAppender.java:61)
at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:123)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:959)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:899)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:891)
at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:514)
at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:238)
at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:250)
at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:547)
at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:263)
at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:234)
at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:127)
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:302)
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:136)
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:127)
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
at org.elasticsearch.cli.Command.main(Command.java:90)
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93)
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:86)
2018-12-20 10:09:14,515 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender
at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.findFactoryMethod(PluginBuilder.java:235)
at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:135)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:959)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:899)
at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:891)
at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:514)
at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:238)
at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:250)
at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:547)
at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:263)
at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:234)
at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:127)
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:302)
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:136)
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:127)
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
at org.elasticsearch.cli.Command.main(Command.java:90)
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93)
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:86)
2018-12-20 10:09:14,538 main ERROR Null object returned for RollingFile in Appenders.
2018-12-20 10:09:14,538 main ERROR Unable to locate appender "rolling" for logger config "root"***
elk安装时最常见的报错
1.在启动kibana的时候报一下错误maxfiledescriptors[4096]forelasticsearchprocesslikelytoolow,increasetoatleast[65536]maxnumberofthreads[1024]foruser[lishang]likelytoolow,increasetoatleast[2048]解决方法：切换到root账户后，修改/et 查看详情
elk报错(代码片段)
1、elasticsearch启动失败如下：[[email protected]home]#/home/elasticsearch-6.3.0/bin/elasticsearch[2019-02-11T07:15:14,874][WARN][o.e.b.ElasticsearchUncaughtExceptionHandler][]uncaughtexceptioninthread[main]org.elasticsearch.bootstrap.StartupException:java.lang.RuntimeException:cannotrun... 查看详情
elk报错
#Memory:error=12,reason=Cannotallocatememorysed-i‘s/^#MAX_LOCKED_MEMORY./MAX_LOCKED_MEMORY=unlimited/‘/etc/sysconfig/elasticsearchsed-i‘$a*softmemlockunlimited‘/etc/security/limits.confsed-i‘$ahardme 查看详情
elk的启动脚本(代码片段)
作者：邓聪聪方便自己的应用，制作一个elk的自启动脚本#!/bin/shPATH=$PATH./etc/init.d/functionsstart()if[`whoami`==elk];thenaction"startelasticsearch:"falseecho"pleaseuseuserelkstarted"elsesu-elk-c"/elk/elasticsearch-6.3.0/bin 查看详情
记elk打包时得到问题
...ot。以为在装的时候也可以使用root权限，但是在打包装完启动不了，报错默认的kibana不输出日志，kibana的服务还没有日志，只能去/var/log/message里面去看，（可以在配置中配置日志路径）提示/usr/share/kibana底下的一个文件没有权限... 查看详情
优化elk
...起来之后，我的内心几乎是崩溃的，16G内存16核cpu还经常报错。一、logstash和elasticsearch同时报错logstash出现大量报错，可能是es占用heap太多，没有优化es导致的retryingfailedactionwithresponsecode:503{:level=>:warn}toomanyattemptsatsendingevent.dropp... 查看详情
elk开机启动service文件内容
为了实现ELK的3部分开机启动，可以添加各项服务对应的service文件，再通过systemctlenableXXX实现ELK所有服务开机启动。Elasticsearchelasticsearch.service（/usr/lib/systemd/system）[Unit]Description=ElasticsearchDocumentation=http://www.elastic.coWan 查看详情
elk中的elasticsearch集群的部署
...说，主要针对集群中节点发现，以及master问题，而不是es启动不起来或报错等问题）~研 查看详情
docker搭建服务及报错解决-elk(代码片段)
学习目标：一安装Elasticsearch1.下载ES镜像dockerpullelasticsearch:7.7.12.运行镜像dockerrun-itd--namees1-p9200:9200-p9300:9300-vesdata:/usr/share/elasticsearch/data-vesconfig:/usr/share/elasticsearch/config-vesp 查看详情
elk的logstash怎么过滤出报错的模块
2.1日志的采集灵活性是我们选择日志采集方案更看重的因素，所以logstash属于首先方案，它可以兼顾多种不同系统和应用类型等因素的差异，从源头上进行一些初步的日志预处理。logstash唯一的小缺憾是它的不轻便，因为它是使... 查看详情
elk5.0组件后台启动
elasticsearch后台启动，只需要在bin目录下执行：./elasticsearch-d 查看是否启动成功使用：psaux|grepelasticsearch kibana后台启动命令：nohupbin/kibana& 查看详情
elk相关启动脚本
elasticsearch启动脚本#!/bin/bash# Description:Elasticsearch ORS SERVERES_HOME=/usr/local/elasticsearch-5.0.0PID=$(jps | grep Elasticsearch | awk ‘{print $ 查看详情
elk日志分析
...tar-xfelasticsearch-7.6.1-linux-x86_64.tar.gz-C/home5.默认情况下root启动服务会报错 6.以es用户启动Exceptioninthread"main"org.elasticsearch.bootstrap.BootstrapException:java.nio.file.AccessDeniedException:/home/elasticsearch/config/elasticsearch.keystore7.又报错 [1]... 查看详情
elk安装2.0版本，自己总结，比较细致es单机的安装
... 用root用户会报错，版本6之前还是可以用root用户启动的，针对es的保护，数据的一些问题，6之后就不允许了。 启动成功 下面验证一下 可以直接用浏览器... 查看详情
elk的tar.gz的安装
在安装ELK的过程中有些问题。安装elasticsearch和kibana直接使用系统启动脚本，加入系统启动。安装logstash的时候使用system-install文件来生成系统启动脚本。在各种使用中的问题只能查看日志文件找出问题的出现，解决之。 查看详情
docker搭建elk
dockerrun-d-p5601:5601-p9200:9200 -p5044:5044-v/opt/data/elk-data:/var/lib/elasticsearch--nameelksebp/elk1.运行完后报错： maxvirtualmemoryareasvm.max_map_count[26214]istoolow,increasetoatleas 查看详情
elk问题排错，访问显示：kibanaserverisnotreadyyet
...naserverisnotreadyyet，很奇怪。远程登录主机查看每个服务的启动情况。 说明kibana服务是正常在运行的。 发现elasticsearch服务down掉了，马上准备重启。 启动正常。 查看logstash启动正常。刷新服务。&n... 查看详情
elk学习笔记之elasticsearch启动时warning解决办法
elasticsearch启动时Warning解决办法： 转载：http://www.dajiangtai.com/community/18136.do?origin=csdn-geek&dt=1214问题一： [2016-11-06T16:27:21,712][WARN][o.e.b.JNANatives]unabletoinstallsyscallfilter:&n 查看详情