# Elasticsearch 6.2 start but keep throwing an error message

**URL:** <https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033>\
**Category:** Elasticsearch\
**Created:** [February 8, 2018, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033 "2018-02-08T12:05:17Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![branislav](https://avatars.discourse-cdn.com/v4/letter/b/77aa72/32.png) [@branislav](https://discuss.elastic.co/u/branislav)\
**Post date:** [February 8, 2018, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033/1 "2018-02-08T12:05:17Z")

</div>

Hello, maybe someone encounter this error

```
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:291)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.cli.Command.main(Command.java:90)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: at 
org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85)
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: 2018-02-08 11:23:20,530 main ERROR Null 
object returned for RollingFile in Appenders.
Feb 08 11:23:20 elasticshsearch04 elasticsearch[1263]: 2018-02-08 11:23:20,531 main ERROR Unable 
to locate appender "audit_rolling" for logger config
"org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail"

```

elasticsearch seems to be running just fine, x-pack is not installed. Any ideas what might be wrong?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [February 16, 2018, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033/2 "2018-02-16T09:13:21Z")

</div>

Was X-Pack installed at some point?

It looks like your log4j configuration has X-Pack references in it.

---

<div class="post-metadata">

**Author:** ![branislav](https://avatars.discourse-cdn.com/v4/letter/b/77aa72/32.png) [@branislav](https://discuss.elastic.co/u/branislav)\
**Post date:** [February 20, 2018, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033/3 "2018-02-20T11:27:45Z")

</div>

Hey TimV, thanks for the reply, no X-pack wasnt install at any point, and still i can see x-pack config folder in /etc/elasticsearch/ so that made me curious. Does this mean x-pack was actually installed and i missed something?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [February 20, 2018, 10:50pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033/4 "2018-02-20T22:50:41Z")

</div>

If you have a nice x-pack directory, then X-Pack must have been installed at some point - perhaps someone else did it?

---

<div class="post-metadata">

**Author:** ![branislav](https://avatars.discourse-cdn.com/v4/letter/b/77aa72/32.png) [@branislav](https://discuss.elastic.co/u/branislav)\
**Post date:** [March 16, 2018, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033/5 "2018-03-16T11:02:37Z")

</div>

Not to my knowledge, anyway the question is obsolete now, since at the end we went for it and installed x-pack for monitoring on all nodes. Thank you for your time

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 13, 2018, 11:03am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-start-but-keep-throwing-an-error-message/119033/6 "2018-04-13T11:03:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.