thanks for replying.
as i said, when i use default path (var/log/elasticsearch), everything is ok and elasticsearch.log is as following:
[2018-11-28T02:27:50,488][INFO ][o.e.n.Node ] [node-1] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch.GLvLpTRo, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -XX:+PrintGCDetails, -XX:+PrintGCDateStamps, -XX:+PrintTenuringDistribution, -XX:+PrintGCApplicationStoppedTime, -Xloggc:/var/log/elasticsearch/gc.log, -XX:+UseGCLogFileRotation, -XX:NumberOfGCLogFiles=32, -XX:GCLogFileSize=64m, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=rpm]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [aggs-matrix-stats]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [analysis-common]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [ingest-common]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-expression]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-mustache]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [lang-painless]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [mapper-extras]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [parent-join]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [percolator]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [rank-eval]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [reindex]
[2018-11-28T02:27:53,431][INFO ][o.e.p.PluginsService ] [node-1] loaded module [repository-url]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [transport-netty4]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [tribe]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-ccr]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-core]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-deprecation]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-graph]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-logstash]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-ml]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-monitoring]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-rollup]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-security]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-sql]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-upgrade]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] loaded module [x-pack-watcher]
[2018-11-28T02:27:53,432][INFO ][o.e.p.PluginsService ] [node-1] no plugins loaded
[2018-11-28T02:28:00,145][INFO ][o.e.x.s.a.s.FileRolesStore] [node-1] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2018-11-28T02:28:00,952][INFO ][o.e.x.m.j.p.l.CppLogMessageHandler] [node-1] [controller/3996] [Main.cc@109] controller (64 bit): Version 6.5.1 (Build 1c5fe241dd9aea) Copyright (c) 2018 Elasticsearch BV
[2018-11-28T02:28:01,548][DEBUG][o.e.a.ActionModule ] [node-1] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security
[2018-11-28T02:28:01,860][INFO ][o.e.d.DiscoveryModule ] [node-1] using discovery type [zen] and host providers [settings]
[2018-11-28T02:28:03,111][INFO ][o.e.n.Node ] [node-1] initialized
[2018-11-28T02:28:03,111][INFO ][o.e.n.Node ] [node-1] starting ...
[2018-11-28T02:28:03,333][INFO ][o.e.t.TransportService ] [node-1] publish_address {192.168.170.137:9300}, bound_addresses {192.168.170.137:9300}
[2018-11-28T02:28:03,370][INFO ][o.e.b.BootstrapChecks ] [node-1] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2018-11-28T02:28:06,540][INFO ][o.e.c.s.MasterService ] [node-1] zen-disco-elected-as-master ([0] nodes joined), reason: new_master {node-1}{0nnC4wUtRjmaA40wl-LyhQ}{_w9pZt5KSCWWiAf7mQDHrA}{192.168.170.137}{192.168.170.137:9300}{ml.machine_memory=3873095680, xpack.installed=true, ml.max_open_jobs=20, ml.enabled=true}
[2018-11-28T02:28:06,545][INFO ][o.e.c.s.ClusterApplierService] [node-1] new_master {node-1}{0nnC4wUtRjmaA40wl-LyhQ}{_w9pZt5KSCWWiAf7mQDHrA}{192.168.170.137}{192.168.170.137:9300}{ml.machine_memory=3873095680, xpack.installed=true, ml.max_open_jobs=20, ml.enabled=true}, reason: apply cluster state (from master [master {node-1}{0nnC4wUtRjmaA40wl-LyhQ}{_w9pZt5KSCWWiAf7mQDHrA}{192.168.170.137}{192.168.170.137:9300}{ml.machine_memory=3873095680, xpack.installed=true, ml.max_open_jobs=20, ml.enabled=true} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)]])
[2018-11-28T02:28:06,669][INFO ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [node-1] publish_address {192.168.170.137:9200}, bound_addresses {192.168.170.137:9200}
[2018-11-28T02:28:06,669][INFO ][o.e.n.Node ] [node-1] started
[2018-11-28T02:28:07,024][WARN ][o.e.x.s.a.s.m.NativeRoleMappingStore] [node-1] Failed to clear cache for realms []
[2018-11-28T02:28:07,083][INFO ][o.e.l.LicenseService ] [node-1] license [2b3ea0e4-fbaa-42e0-961e-a4ec36ac1793] mode [basic] - valid
[2018-11-28T02:28:07,103][INFO ][o.e.g.GatewayService ] [node-1] recovered [0] indices into cluster_state
[2018-11-28T02:29:19,595][INFO ][o.e.n.Node ] [node-1] stopping ...
[2018-11-28T02:29:19,680][INFO ][o.e.x.w.WatcherService ] [node-1] stopping watch service, reason [shutdown initiated]
[2018-11-28T02:29:20,053][INFO ][o.e.x.m.j.p.l.CppLogMessageHandler] [node-1] [controller/3996] [Main.cc@148] Ml controller exiting
[2018-11-28T02:29:20,057][INFO ][o.e.x.m.j.p.NativeController] [node-1] Native controller process has stopped - no new native processes can be started