max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]

[sapache]

Hi ! i'm trying to setting up but i'm stuck at step 5. Cerebro. Cerebro can't to connect to elastricsearch. I used docker stats to see if elasticsearch was running, it was actually looping. I looked at the logs : docker logs -f pfanalytics_elasticsearch_1 ; and then i saw :

[2020-10-04T18:56:56,262][INFO ][o.e.n.Node               ] [fEncsgq] starting ...
[2020-10-04T18:56:56,406][INFO ][o.e.t.TransportService   ] [fEncsgq] publish_address {172.18.0.8:9300}, bound_addresses {0.0.0.0:9300}
[2020-10-04T18:56:56,417][INFO ][o.e.b.BootstrapChecks    ] [fEncsgq] bound or publishing to a non-loopback address, enforcing bootstrap checks
ERROR: [1] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]
[2020-10-04T18:56:56,424][INFO ][o.e.n.Node               ] [fEncsgq] stopping ...
[2020-10-04T18:56:56,458][INFO ][o.e.n.Node               ] [fEncsgq] stopped
[2020-10-04T18:56:56,458][INFO ][o.e.n.Node               ] [fEncsgq] closing ...
[2020-10-04T18:56:56,470][INFO ][o.e.n.Node               ] [fEncsgq] closed

I think that i will need to reset max file descriptors. But i'm stuck, i don't know how to do this. (i'm setting up pfense-analytics on my NAS Asustor, there is no such file /etc/security/limits.conf). Could you please help ?

[sapache]

Hi all Solved by editing docker-compose.yml and adding : elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.5 mem_limit: 4g restart: always volumes:

• es_data:/usr/share/elasticsearch/data env_file:
• ./elasticsearch.env ulimits: nofile: soft: 65536 hard: 65536 memlock: soft: -1 hard: -1 ports:
• 9200:9200

[lephisto]

Interessting, i never ran into this. Have you set:

vm.max_map_count=262144 ?