ElasticsearchException[failed to bind service]; nested: AccessDeniedException[/usr/share/elasticsearch/data/nodes];",
# 权限问题
sudo chown -R 1000:1000 /home/es/node1/data
sudo chown -R 1000:1000 /home/es/node2/data
 

ERROR: [1] bootstrap checks failed. You must address the points described in the following [1] lines before starting Elasticsearch.
bootstrap check failure [1] of [1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
ERROR: Elasticsearch did not exit normally - check the logs at /usr/share/elasticsearch/logs/auth-cluster.log

# 解决办法：
# 执行以下命令，查看当前的值：
sysctl vm.max_map_count

sudo vi /etc/sysctl.cof
#在文件末尾添加或修改下面这行：
vm.max_map_count=262144
# 执行以下命令使配置立即生效（无需重启）：
sudo sysctl -p
# 重启
docker restart es-node1
docker restart es-node2

"message": "error updating geoip database [GeoLite2-ASN.mmdb]"
# 确保docker-compose.yml文件中有配置：
- ingest.geoip.downloader.enabled=false

"message": "failed to retrieve password hash for reserved user [elastic]"
# 小问题，不需要管，只要9200端口能正常访问就行