1. 不能以root用户来启动ES
[esadmin@master bin]$ ./elasticsearch
[2016-11-16 11:11:41,017][WARN ][bootstrap ] unable to install syscall filter: seccomp unavailable: requires kernel 3.5+ with CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER compiled in
[2016-11-16 11:11:41,250][INFO ][node ] [es-node-1] version[2.4.1], pid[3560], build[c67dc32/2016-09-27T18:57:55Z]
[2016-11-16 11:11:41,250][INFO ][node ] [es-node-1] initializing ...
[2016-11-16 11:11:42,213][INFO ][plugins ] [es-node-1] modules [reindex, lang-expression, lang-groovy], plugins [], sites []
[2016-11-16 11:11:42,246][INFO ][env ] [es-node-1] using [1] data paths, mounts [[/ (/dev/mapper/VolGroup-lv_root)]], net usable_space [26.4gb], net total_space [34.9gb], spins? [possibly], types [ext4]
[2016-11-16 11:11:42,246][INFO ][env ] [es-node-1] heap size [989.8mb], compressed ordinary object pointers [true]
[2016-11-16 11:11:42,246][WARN ][env ] [es-node-1] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536]
[2016-11-16 11:11:44,705][INFO ][node ] [es-node-1] initialized
[2016-11-16 11:11:44,705][INFO ][node ] [es-node-1] starting ...
[2016-11-16 11:11:44,822][INFO ][transport ] [es-node-1] publish_address {172.17.42.1:9300}, bound_addresses {[::]:9300}
[2016-11-16 11:11:44,833][INFO ][discovery ] [es-node-1] es-cluster/ld5PBeIJQ1K9ADfxMPxI-g
[2016-11-16 11:11:47,912][INFO ][cluster.service ] [es-node-1] new_master {es-node-1}{ld5PBeIJQ1K9ADfxMPxI-g}{172.17.42.1}{172.17.42.1:9300}, reason: zen-disco-join(elected_as_master, [0] joins received)
[2016-11-16 11:11:47,940][INFO ][http ] [es-node-1] publish_address {172.17.42.1:9200}, bound_addresses {[::]:9200}
[2016-11-16 11:11:47,941][INFO ][node ] [es-node-1] started
[2016-11-16 11:11:48,024][INFO ][gateway ] [es-node-1] recovered [0] indices into cluster_state
解决办法：新建一个ES用户，具体请参考：https://my.oschina.net/topeagle/blog/591451?fromerr=mzOr2qzZ