# Bootstrap checks failed

**URL:** <https://discuss.elastic.co/t/bootstrap-checks-failed/250679>\
**Category:** Elasticsearch\
**Created:** [October 1, 2020, 12:49pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679 "2020-10-01T12:49:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![muthug](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/muthug/32/82555_2.png) [@muthug](https://discuss.elastic.co/u/muthug)\
**Post date:** [October 1, 2020, 12:49pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679/1 "2020-10-01T12:49:28Z")

</div>

```
[2020-10-01T14:44:51,442][INFO][o.e.e.NodeEnvironment] [graylogES-1] using [1] data paths, mounts [[/opt (/dev/mapper/vg00-lvopt)]], net usable_space [12.8gb], net total_space [25.4gb], types [ext4]

```

[2020-10-01T14:44:51,442][INFO][o.e.e.NodeEnvironment] [graylogES-1] heap size [1.9gb], compressed ordinary object pointers [true]  
[2020-10-01T14:44:51,449][INFO][o.e.n.Node] [graylogES-1] node name [graylogES-1], node ID [aBptDUsaRYqtJCut3nNDtg]  
[2020-10-01T14:44:51,449][INFO][o.e.n.Node] [graylogES-1] version[6.7.0], pid[130869], build[default/rpm/8453f77/2019-03-21T15:32:29.844721Z], OS[Linux/3.10.0-1127.el7.x86\_64/amd64], JVM[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0\_261/25.261-b12]  
[2020-10-01T14:44:51,449][INFO][o.e.n.Node] [graylogES-1] JVM arguments [-Xms2g, -Xmx2g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch-6052825587863543749, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs\_err\_pid%p.log, -XX:+PrintGCDetails, -XX:+PrintGCDateStamps, -XX:+PrintTenuringDistribution, -XX:+PrintGCApplicationStoppedTime, -Xloggc:/var/log/elasticsearch/gc.log, -XX:+UseGCLogFileRotation, -XX:NumberOfGCLogFiles=32, -XX:GCLogFileSize=64m, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=rpm]  
[2020-10-01T14:44:53,893][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [aggs-matrix-stats]  
[2020-10-01T14:44:53,893][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [analysis-common]  
[2020-10-01T14:44:53,893][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [ingest-common]  
[2020-10-01T14:44:53,893][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [ingest-geoip]  
[2020-10-01T14:44:53,893][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [ingest-user-agent]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [lang-expression]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [lang-mustache]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [lang-painless]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [mapper-extras]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [parent-join]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [percolator]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [rank-eval]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [reindex]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [repository-url]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [transport-netty4]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [tribe]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-ccr]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-core]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-deprecation]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-graph]  
[2020-10-01T14:44:53,894][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-ilm]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-logstash]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-ml]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-monitoring]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-rollup]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-security]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-sql]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-upgrade]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] loaded module [x-pack-watcher]  
[2020-10-01T14:44:53,895][INFO][o.e.p.PluginsService] [graylogES-1] no plugins loaded  
[2020-10-01T14:44:58,324][INFO][o.e.x.s.a.s.FileRolesStore] [graylogES-1] parsed [0] roles from file [/etc/elasticsearch/roles.yml]  
[2020-10-01T14:44:59,160][INFO][o.e.x.m.p.l.CppLogMessageHandler] [graylogES-1] [controller/130936] [Main.cc@109] controller (64 bit): Version 6.7.0 (Build d74ae2ac01b10d) Copyright (c) 2019 Elasticsearch BV  
[2020-10-01T14:44:59,675][DEBUG][o.e.a.ActionModule] [graylogES-1] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security  
[2020-10-01T14:44:59,947][INFO][o.e.d.DiscoveryModule] [graylogES-1] using discovery type [zen] and host providers [settings]  
[2020-10-01T14:45:00,846][INFO][o.e.n.Node] [graylogES-1] initialized  
[2020-10-01T14:45:00,846][INFO][o.e.n.Node] [graylogES-1] starting ...  
[2020-10-01T14:45:00,997][INFO][o.e.t.TransportService] [graylogES-1] publish\_address {10.46.113.75:9300}, bound\_addresses {10.46.113.75:9300}  
[2020-10-01T14:45:01,016][INFO][o.e.b.BootstrapChecks] [graylogES-1] bound or publishing to a non-loopback address, enforcing bootstrap checks  
[2020-10-01T14:45:01,057][ERROR][o.e.b.Bootstrap] [graylogES-1] node validation exception  
[1] bootstrap checks failed  
[1]: system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk  
[2020-10-01T14:45:01,061][INFO][o.e.n.Node] [graylogES-1] stopping ...  
[2020-10-01T14:45:01,078][INFO][o.e.n.Node] [graylogES-1] stopped  
[2020-10-01T14:45:01,078][INFO][o.e.n.Node] [graylogES-1] closing ...  
[2020-10-01T14:45:01,093][INFO][o.e.n.Node] [graylogES-1] closed

Hi All,  
I am getting above error while start ES service. Please help  
OS:- RHEL 7`Preformatted text`

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [October 1, 2020, 1:03pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679/2 "2020-10-01T13:03:28Z")

</div>

This is the important message.

> system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk

See [System call filter check | Elasticsearch Guide [7.9] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.9/_system_call_filter_check.html) - you should not try to disable but find the source why the process is not allowed to install a seccomp policy on startup.

I vaguely remember, that another user had mounted the tmp directory as noexec and claimed that that was the issue. Not sure this is the case here. Is that the case in your setup?

---

<div class="post-metadata">

**Author:** ![muthug](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/muthug/32/82555_2.png) [@muthug](https://discuss.elastic.co/u/muthug)\
**Post date:** [October 1, 2020, 1:07pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679/3 "2020-10-01T13:07:53Z")

</div>

Nope, i don't have any mount point. But when i disabled bootstrap.system\_call\_filter  
Its start working 🙂

Is that any issues if i disabled bootstrap.system\_call\_filter ??

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [October 1, 2020, 1:09pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679/4 "2020-10-01T13:09:38Z")

</div>

Yes, see the documentation, it's disabling an important security feature.

---

<div class="post-metadata">

**Author:** ![muthug](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/muthug/32/82555_2.png) [@muthug](https://discuss.elastic.co/u/muthug)\
**Post date:** [October 1, 2020, 1:11pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679/5 "2020-10-01T13:11:48Z")

</div>

Got it, Thank you so much 🙂 let me find the another way then

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 29, 2020, 1:12pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679/6 "2020-10-29T13:12:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
