# "Bootstrap check failed" still a mystery? **URL:** \ **Category:** Elasticsearch\ **Created:** [December 7, 2018, 3:42pm UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957 "2018-12-07T15:42:59Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 7, 2018, 3:43pm UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/1 "2018-12-07T15:43:00Z")
Hi, I read many threads related to "Bootstrap check failed" but didn't get any solution. I am using elasticsearch for production environment. below is my ES configuration ``` clustername: elasticsearch node.name: xyz node.master: true node.data: true path.data: /var/elasticseaarch/data patah.logs: /var/elasticsearch/logs network.host: 192.168.8.12 transport.port: 9300 discovery.zen.ping.unicast.hosts: ["192.168.8.11", "192.168.8.12", "192.168.8.13"] discovery.zen.minimum_master_node: 2 ``` OS and ES version ``` ES version: 5.6.12 Linux Version: Redhat 7.6 Kernel version: 3.10.0 ``` I tried with all the configuration which I got in other threads for example: ``` network.host: _eth0_ transport.host: localhost ``` **Unfortunately no luck** Error logs are below: ``` [2018-12-12T14:16:13,023][INFO][o.e.b.BootstrapCheck] [ssosearch01] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks [2018-12-12T14:16:13,024][ERROR][o.e.b.Bootstrap] [ssosearch01] node validation exception bootstrap checks failed ``` I am trying to resolve this issue from the past 2 days. Any help would be appriciated. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [December 7, 2018, 5:05pm UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/2 "2018-12-07T17:05:26Z")
After this line you should see more details about the failure. Please read [https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html) ---
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 8, 2018, 6:16am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/3 "2018-12-08T06:16:05Z")
I went through the link thrice but still not clear where i am doing wrong. ---
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 8, 2018, 6:58am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/4 "2018-12-08T06:58:19Z")
Please find the screenshot of error log as machine is in production i am not able to copy paste logs here here. ![0eee718b-8d26-4031-a27d-394a2f5e4cec](https://us1.discourse-cdn.com/elastic/original/3X/8/d/8dd730da2720e4f9d13a58ed6f9a3db16d8574c9.jpeg) ![15756190-77f3-49ea-9030-448c217a36e7](https://us1.discourse-cdn.com/elastic/original/3X/1/5/15cde6c07cc73afe8bdac054e213e4847fae0b0c.jpeg) ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [December 8, 2018, 7:11am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/5 "2018-12-08T07:11:15Z")
Please don't post images of text as they are hardly readable and not searchable. Instead paste the text and format it with `` icon. Check the preview window. Read this page: [https://www.elastic.co/guide/en/elasticsearch/reference/current/\_system\_call\_filter\_check.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/_system_call_filter_check.html) ---
**Author:** ![Prashant\_Rana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prashant_rana/32/42952_2.png) [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\ **Post date:** [December 8, 2018, 8:04am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/6 "2018-12-08T08:04:40Z")
try disabling system call filters using this setting " bootstrap.system\_call\_filter: false" in your elasticsearch.yml file. ---
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 8, 2018, 8:21am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/7 "2018-12-08T08:21:39Z")
Apologies for that. As i mentioned before, logs are in production server which doesn't have internet connectivity i am not able to copy paste the logs. After adding "bootstrap.system\_call\_filter: false" i am able to start the service but not able to connect to [http://localhost:9200](http://localhost:9200) Error logs: ``` # curl -XGET 'http://localhost:9200/' curl: (7) Failed connect to localhost:9200; Connection refused ``` But i verified service is running. ---
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 8, 2018, 8:23am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/8 "2018-12-08T08:23:14Z")
Thanks for the reply After adding "bootstrap.system\_call\_filter: false" i am able to start the service but not able to connect to [http://localhost:9200](http://localhost:9200) Error logs: ```auto # curl -XGET 'http://localhost:9200/' curl: (7) Failed connect to localhost:9200; Connection refused ``` But i verified service is running. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [December 8, 2018, 8:42am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/9 "2018-12-08T08:42:12Z")
Check again the logs and look for the line where port 9200 is mentioned. You'll see what is the IP address to use. ---
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 10, 2018, 7:50am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/10 "2018-12-10T07:50:13Z")
I am getting same IP which i have given in the configuration. ``` publish_address (192.168.8.12:9200), bound_addresses (192.168.8.12:9200) ``` ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [December 10, 2018, 8:08am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/11 "2018-12-10T08:08:33Z")
So don't run: ```auto curl -XGET 'http://localhost:9200/' ``` But: ```auto curl -XGET 'http://192.168.8.12:9200/' ``` ---
**Author:** ![Nikhil\_Jaiswal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikhil_jaiswal/32/39326_2.png) [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Post date:** [December 10, 2018, 9:37am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/12 "2018-12-10T09:37:17Z")
Yes, It worked Thanks a lot. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 7, 2019, 9:37am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-still-a-mystery/159957/13 "2019-01-07T09:37:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.