# Elasticsearch container doesn't start after ingest-geo-ip **URL:** \ **Category:** Elasticsearch\ **Created:** [April 9, 2018, 12:40pm UTC](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321 "2018-04-09T12:40:26Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![AJ\_NOURI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aj_nouri/32/29741_2.png) [@AJ\_NOURI](https://discuss.elastic.co/u/AJ_NOURI)\ **Post date:** [April 9, 2018, 12:40pm UTC](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321/1 "2018-04-09T12:40:26Z")
I am starting with ELK and following the official doc on how to use filebeat with modules: [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-quickstart.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-quickstart.html) I am using separate containers for Elasticsearch, Kibana and Logstash I am using ELK as separate containers: ``` $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3a3b9a484831 logstash "/docker-entrypoin..." 25 minutes ago Up 25 minutes 0.0.0.0:5044->5044/tcp logstash 7a4829ac080d kibana "/docker-entrypoin..." 50 minutes ago Up 38 minutes 0.0.0.0:5601->5601/tcp kibana 6148a8af18e6 elasticsearch "/docker-entrypoin..." About an hour ago Up About an hour 0.0.0.0:9200->9200/tcp, 0.0.0.0:9300->9300/tcp elasticsearch ``` In the documentation it is required to restart elasticsearch after installing the two beats modules - \*\* ingest-geo-ip\*\* - \*\* ingestuser-agent\*\* Both modules are installed properly on elasticsearch container: ``` bin/elasticsearch-plugin install ingest-geoip -> Downloading ingest-geoip from elastic [=================================================] 100% @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: plugin requires additional permissions @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ * java.lang.RuntimePermission accessDeclaredMembers See http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html for descriptions of what these permissions allow and the associated risks. Continue with installation? [y/N]y -> Installed ingest-geoip # bin/elasticsearch-plugin install ingest-user-agent -> Downloading ingest-user-agent from elastic [=================================================] 100% -> Installed ingest-user-agent ``` According to the doc a restart of elasticsearch is required. After stopping elasticsearch container, I couldn't start it again. The logs shows that there is an exception with the installed **ingest-geo-ip** module > [2018-04-09T12:29:52,327][WARN][o.e.b.ElasticsearchUncaughtExceptionHandler] uncaught exception in thread [main] > org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: java.nio.file.NoSuchFileException: /usr/share/elasticsearch/config/ingest-geoip > at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:136) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:123) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:70) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:134) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:91) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:84) ~[elasticsearch-5.6.8.jar:5.6.8] > Caused by: java.lang.RuntimeException: java.nio.file.NoSuchFileException: /usr/share/elasticsearch/config/ingest-geoip > at org.elasticsearch.ingest.geoip.IngestGeoIpPlugin.getProcessors(IngestGeoIpPlugin.java:74) ~[?:?] > at org.elasticsearch.ingest.IngestService.(IngestService.java:58) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.node.Node.(Node.java:354) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.node.Node.(Node.java:245) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:233) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:233) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:342) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:132) ~[elasticsearch-5.6.8.jar:5.6.8] > ... 6 more > Caused by: java.nio.file.NoSuchFileException: /usr/share/elasticsearch/config/ingest-geoip > at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86) ~[?:?] > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102) ~[?:?] > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107) ~[?:?] > at sun.nio.fs.UnixFileSystemProvider.newDirectoryStream(UnixFileSystemProvider.java:427) ~[?:?] > at java.nio.file.Files.newDirectoryStream(Files.java:457) ~[?:1.8.0\_162] > at java.nio.file.Files.list(Files.java:3451) ~[?:1.8.0\_162] > at org.elasticsearch.ingest.geoip.IngestGeoIpPlugin.loadDatabaseReaders(IngestGeoIpPlugin.java:85) ~[?:?] > at org.elasticsearch.ingest.geoip.IngestGeoIpPlugin.getProcessors(IngestGeoIpPlugin.java:72) ~[?:?] > at org.elasticsearch.ingest.IngestService.(IngestService.java:58) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.node.Node.(Node.java:354) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.node.Node.(Node.java:245) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:233) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:233) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:342) ~[elasticsearch-5.6.8.jar:5.6.8] > at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:132) ~[elasticsearch-5.6.8.jar:5.6.8] > ... 6 more Any hint? Am I doing something wrong? Thanks for your assistance. ---
**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\ **Post date:** [April 9, 2018, 5:05pm UTC](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321/2 "2018-04-09T17:05:15Z")
I think it seems like an Elasticsearch issue. Could you please post this question on their forum? ---
**Author:** ![AJ\_NOURI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aj_nouri/32/29741_2.png) [@AJ\_NOURI](https://discuss.elastic.co/u/AJ_NOURI)\ **Post date:** [April 10, 2018, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321/3 "2018-04-10T08:16:28Z")
Done, thanks @kvch . ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 8, 2018, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-container-doesnt-start-after-ingest-geo-ip/127321/4 "2018-05-08T08:16:46Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.