action.auto_create_index: true
#script.groovy.sandbox.enabled: true
#script.engine.groovy.inline.aggs: true
#Set a custom allowed content length:
http.max_content_length: 500mb
cluster.routing.allocation.disk.watermark.low: 90%
cluster.routing.allocation.disk.watermark.high: 95%
indices.fielddata.cache.size:  20%
indices.breaker.fielddata.limit: 60%
network.host: 0.0.0.0
xpack.security.enabled: false

---
# Default Kibana configuration from kibana-docker.server.name: kibana
server.host: "0.0.0.0"
elasticsearch.url: http://elasticsearch:9200
xpack.monitoring.ui.container.elasticsearch.enabled: false
server.port: 5601
xpack.security.enabled: false

## JVM configuration################################################################
## IMPORTANT: JVM heap size
################################################################
##
## You should always set the min and max JVM heap
## size to the same value. For example, to set
## the heap to 4 GB, set:
##
## -Xms4g
## -Xmx4g
##
## See https://www.elastic.co/guide/en/elasticsearch/reference/current/heap-size.html
## for more information
##
################################################################# Xms represents the initial size of total heap space
# Xmx represents the maximum size of total heap space-Xms2g
-Xmx2g################################################################
## Expert settings
################################################################
##
## All settings below this section are considered
## expert settings. Don't tamper with them unless
## you understand what you are doing
##
################################################################## GC configuration
-XX:+UseConcMarkSweepGC
-XX:CMSInitiatingOccupancyFraction=75
-XX:+UseCMSInitiatingOccupancyOnly## G1GC Configuration
# NOTE: G1GC is only supported on JDK version 10 or later.
# To use G1GC uncomment the lines below.
# 10-:-XX:-UseConcMarkSweepGC
# 10-:-XX:-UseCMSInitiatingOccupancyOnly
# 10-:-XX:+UseG1GC
# 10-:-XX:InitiatingHeapOccupancyPercent=75## optimizations# pre-touch memory pages used by the JVM during initialization
-XX:+AlwaysPreTouch## basic# explicitly set the stack size
-Xss1m# set to headless, just in case
-Djava.awt.headless=true# ensure UTF-8 encoding by default (e.g. filenames)
-Dfile.encoding=UTF-8# use our provided JNA always versus the system one
-Djna.nosys=true# turn off a JDK optimization that throws away stack traces for common
# exceptions because stack traces are important for debugging
-XX:-OmitStackTraceInFastThrow# flags to configure Netty
-Dio.netty.noUnsafe=true
-Dio.netty.noKeySetOptimization=true
-Dio.netty.recycler.maxCapacityPerThread=0# log4j 2
-Dlog4j.shutdownHookEnabled=false
-Dlog4j2.disable.jmx=true-Djava.io.tmpdir=${ES_TMPDIR}## heap dumps# generate a heap dump when an allocation from the Java heap fails
# heap dumps are created in the working directory of the JVM
-XX:+HeapDumpOnOutOfMemoryError# specify an alternative path for heap dumps; ensure the directory exists and
# has sufficient space
-XX:HeapDumpPath=data# specify an alternative path for JVM fatal error logs
-XX:ErrorFile=logs/hs_err_pid%p.log## JDK 8 GC logging8:-XX:+PrintGCDetails
8:-XX:+PrintGCDateStamps
8:-XX:+PrintTenuringDistribution
8:-XX:+PrintGCApplicationStoppedTime
8:-Xloggc:logs/gc.log
8:-XX:+UseGCLogFileRotation
8:-XX:NumberOfGCLogFiles=32
8:-XX:GCLogFileSize=64m# JDK 9+ GC logging
9-:-Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m
# due to internationalization enhancements in JDK 9 Elasticsearch need to set the provider to COMPAT otherwise
# time/date parsing will break in an incompatible way for some date patterns and locals
9-:-Djava.locale.providers=COMPAT# temporary workaround for C2 bug with JDK 10 on hardware with AVX-512
10-:-XX:UseAVX=2

version: '2'services:elasticsearch:image: docker.elastic.co/elasticsearch/elasticsearch:6.1.3ports:- "9200:9200"- "9300:9300"environment:- ES_JAVA_OPTS: "-Xms30g -Xmx30g"

      - cluster.name=docker-cluster

        - bootstrap.memory_lock=true

ulimits:
        memlock:
          soft: -1
          hard: -1

networks:- docker_elkvolumes:- ./elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml- /data/elasticsearch1:/usr/share/elasticsearch/data- /data/tt:/usr/share/elasticsearch/plugins/- /data/backups:/usr/share/elasticsearch/backups- /data/longterm_backups:/usr/share/elasticsearch/longterm_backups- ./elasticsearch/config/jvm.options:/usr/share/elasticsearch/config/jvm.optionslogstash:image: docker.elastic.co/logstash/logstash:6.1.3command: -f /etc/logstash/conf.d/ --config.reload.automatic volumes:- ./logstash/config:/etc/logstash/conf.dports:- "5001:5001"- "5044:5044"networks:- docker_elkdepends_on:- elasticsearchkibana:image: docker.elastic.co/kibana/kibana:6.1.3volumes:- /tmp/:/etc/archives/- ./kibana/config/kibana.yml:/usr/share/kibana/config/kibana.yml# - /data/tt:/usr/share/kibana/plugins/ports:- "5601:5601"networks:- docker_elkdepends_on:- elasticsearch
networks:docker_elk:driver: bridge

vim /etc/sysctl.conf
vm.max_map_count=262144使参数生效
sysctl -p

server {listen *:80;client_max_body_size 2048m;client_body_timeout 300000000s;send_timeout 3000000000s;auth_basic "Protected Elasticsearch";auth_basic_user_file /etc/nginx/.htpasswd;access_log  /var/log/nginx/elk_access.log;error_log   /var/log/nginx/elk_error.log;server_name elk.xget.com;location / {proxy_pass http://10.10.1.2:5601;
                 proxy_read_timeout  200000s;proxy_send_timeout  200000s;}}server {listen *:9200;location / {proxy_pass http://10.10.1.2:9200;
        }
}server {client_max_body_size 2048m;client_body_timeout 300000000s;send_timeout 300000000s;listen *:9300;location / {proxy_pass http://10.10.1.2:9300;
                 proxy_read_timeout  20000s;proxy_send_timeout  20000s;}
}