# Elastic Plugin suddenly stopped

**URL:** <https://discuss.elastic.co/t/elastic-plugin-suddenly-stopped/134227>\
**Category:** Elasticsearch\
**Created:** [June 1, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elastic-plugin-suddenly-stopped/134227 "2018-06-01T13:01:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![abhat](https://avatars.discourse-cdn.com/v4/letter/a/8e8cbc/32.png) [@abhat](https://discuss.elastic.co/u/abhat)\
**Post date:** [June 1, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elastic-plugin-suddenly-stopped/134227/1 "2018-06-01T13:01:00Z")

</div>

Hi Team,

The elastic plugin suddenly started to show RED in Kibana dashboard.

Port 9200 is listening and process is also up but curl is giving some authentication errors.

Note - Nginx and X-PACK is not yet installed.

```auto
=============================================================================
[root@clm-pun-t2yior bin]# curl -XGET 'localhost:9200/?pretty'
{
  "error" : {
    "root_cause" : [
      {
        "type" : "security_exception",
        "reason" : "missing authentication token for REST request [/?pretty]",
        "header" : {
          "WWW-Authenticate" : "Basic realm=\"security\" charset=\"UTF-8\""
        }
      }
    ],
    "type" : "security_exception",
    "reason" : "missing authentication token for REST request [/?pretty]",
    "header" : {
      "WWW-Authenticate" : "Basic realm=\"security\" charset=\"UTF-8\""
    }
  },
  "status" : 401
}
================================================================================
[root@clm-pun-t2yior bin]# systemctl status elasticsearch.service
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2018-06-01 08:33:01 EDT; 14min ago
     Docs: http://www.elastic.co
  Process: 3189 ExecStartPre=/usr/share/elasticsearch/bin/elasticsearch-systemd-pre-exec (code=exited, status=0/SUCCESS)
 Main PID: 3191 (java)
   CGroup: /system.slice/elasticsearch.service
           └─3191 /bin/java -Xms2g -Xmx2g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -X...

Jun 01 08:33:01 clm-pun-t2yior systemd[1]: Starting Elasticsearch...
Jun 01 08:33:01 clm-pun-t2yior systemd[1]: Started Elasticsearch.
====================================================================================
[root@clm-pun-t2yior bin]# netstat -plntu
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1/systemd
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1140/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1592/master
tcp 0 0 10.133.188.252:5601 0.0.0.0:* LISTEN 3268/node
tcp6 0 0 :::4750 :::* LISTEN 1731/bin/rscd
tcp6 0 0 :::111 :::* LISTEN 1/systemd
tcp6 0 0 ::1:9200 :::* LISTEN 3191/java
tcp6 0 0 127.0.0.1:9200 :::* LISTEN 3191/java
tcp6 0 0 ::1:9300 :::* LISTEN 3191/java
tcp6 0 0 127.0.0.1:9300 :::* LISTEN 3191/java
======================================================================================

```

Kind Regards,  
Asif Bhat

---

<div class="post-metadata">

**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\
**Post date:** [June 8, 2018, 3:18pm UTC](https://discuss.elastic.co/t/elastic-plugin-suddenly-stopped/134227/2 "2018-06-08T15:18:48Z")

</div>

Could you post the log file from the server?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2018, 3:18pm UTC](https://discuss.elastic.co/t/elastic-plugin-suddenly-stopped/134227/3 "2018-07-06T15:18:49Z")

</div>

Closed on July 6, 2018, 3:18pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.