# Elasticsearch 5.6.15 do not start after install

**URL:** <https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889>\
**Category:** Elasticsearch\
**Created:** [July 23, 2019, 6:16pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889 "2019-07-23T18:16:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sandipatmca](https://avatars.discourse-cdn.com/v4/letter/s/82dd89/32.png) [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Post date:** [July 23, 2019, 6:16pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889/1 "2019-07-23T18:16:41Z")

</div>

Elasticsearch do not start after installation due to below error:  
[9.7gb], spins? [possibly], types [ext4]  
[2019-07-23T13:43:44,765][INFO][o.e.e.NodeEnvironment] [6yEOT5I] heap size [1.9gb], compressed ordinary object pointers [true]  
[2019-07-23T13:43:44,771][ERROR][o.e.n.Node] detected index data in default.path.data [/var/lib/elasticsearch/nodes/0/indices] where there should not be any  
[2019-07-23T13:43:44,772][INFO][o.e.n.Node] index folder [leV9g4DMR\_WweW7oOMwD6A] in default.path.data [/var/lib/elasticsearch/nodes/0/indices] must be moved to any of [/opt/elasticsearch/data/nodes/0/indices]  
[2019-07-23T13:43:44,774][ERROR][o.e.b.Bootstrap] Exception  
java.lang.IllegalStateException: detected index data in default.path.data [/var/lib/elasticsearch] where there should not be any; check the logs for details

I dont see this error on our lab environment after elastic installation but this same error has been observed in customer environment everytime. To resolve the issue I have to manually delete the indices folder and then restart the Elastic process.  
I dont know why this is happening on customer environment although the installation process that I am following on the server is same. Can some assist on this please.

---

<div class="post-metadata">

**Author:** ![sandipatmca](https://avatars.discourse-cdn.com/v4/letter/s/82dd89/32.png) [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Post date:** [July 23, 2019, 6:20pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889/2 "2019-07-23T18:20:11Z")

</div>

Just FYI, Below is my entry in elasticsearch.yml .It is default value that gets configured by Elasticsearch during install .Not sure how come indices is getting stored under /var/lib/elasticsearch/nodes/0/indices directory

# ----------------------------------- Paths ------------------------------------

# 

# Path to directory where to store the data (separate multiple locations by comma):

# 

path.data: /opt/elasticsearch/data

# 

# 

* * *

---

<div class="post-metadata">

**Author:** ![sandipatmca](https://avatars.discourse-cdn.com/v4/letter/s/82dd89/32.png) [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Post date:** [July 23, 2019, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889/3 "2019-07-23T20:03:33Z")

</div>

I got the root cause for this issue.Here is my finding.

We manually deleted the indices directory and restarted elasticsearch to bring it up successfully. Root cause for this issue is Elasticsearch has changed the data & log path in version 5.6.15.

version 5.2.0 -\> Data Path : /var/lib/elasticsearch , Log path: /var/log/elasticsearch  
version 5.6.15 -\> Data Path:/opt/elasticsearch/data , Log path: /opt/elasticsearch/log

Unfortunately, Elasticsearch do not delete indices directory during uninstall so the indices remained on that directory and this residual indices was not allowing the new Elasticsearch to startup since it do not expect any indices in that directory.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 20, 2019, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889/4 "2019-08-20T20:03:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
