Elasticsearch 6.2 start but keep throwing an error message

Elastic Stack Elasticsearch
1

Hello, maybe someone encounter this error

Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:291)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.cli.Command.main(Command.java:90)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: 2018-02-08 11:23:20,530 main ERROR Null 
object returned for RollingFile in Appenders.
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: 2018-02-08 11:23:20,531 main ERROR Unable 
to locate appender "audit_rolling" for logger config
"org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail"

elasticsearch seems to be running just fine, x-pack is not installed. Any ideas what might be wrong?

2

Was X-Pack installed at some point?

It looks like your log4j configuration has X-Pack references in it.

3

Hey TimV, thanks for the reply, no X-pack wasnt install at any point, and still i can see x-pack config folder in /etc/elasticsearch/ so that made me curious. Does this mean x-pack was actually installed and i missed something?

4

If you have a nice x-pack directory, then X-Pack must have been installed at some point - perhaps someone else did it?

5

Not to my knowledge, anyway the question is obsolete now, since at the end we went for it and installed x-pack for monitoring on all nodes. Thank you for your time

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.