# Elasticsearch fails shortly after starting (CentOS 7, ES 5.6.\*, installed using RPM)

**URL:** https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934
**Category:** Elasticsearch
**Created:** [December 23, 2018, 3:09am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934 "2018-12-23T03:09:36Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![keddy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/keddy/32/39125_2.png) [@keddy](https://discuss.elastic.co/u/keddy)
#### Post date: [December 23, 2018, 3:09am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934/1 "2018-12-23T03:09:36Z")

</div>

Getting the following systemd log entries when attempting to start ElasticSearch:

```auto
Dec 22 21:57:42 mydomain.com systemd[1]: Starting Elasticsearch...
Dec 22 21:57:42 mydomain.com systemd[1]: Started Elasticsearch.
Dec 22 21:57:54 mydomain.com systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE
Dec 22 21:57:54 mydomain.com systemd[1]: Unit elasticsearch.service entered failed state.
Dec 22 21:57:54 mydomain.com systemd[1]: elasticsearch.service failed.

```

how do I debug this to figure out what is causing the problem?

---

<div class="post-metadata">

### Author: ![keddy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/keddy/32/39125_2.png) [@keddy](https://discuss.elastic.co/u/keddy)
#### Post date: [December 23, 2018, 3:11am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934/2 "2018-12-23T03:11:32Z")

</div>

I saw in a similar post that a respondent asked what the following command produced:

`ls -ld /var/ /var/log/ /var/log/elasticsearch/ /usr/share/elasticsearch/ /usr/share/elasticsearch/bin/`

This command produces the following result:

```auto
drwxr-xr-x 6 root root 4096 Dec 22 21:19 /usr/share/elasticsearch/
drwxr-xr-x 2 root root 4096 Dec 22 21:19 /usr/share/elasticsearch/bin/
drwxr-xr-x 24 root root 4096 Dec 22 19:55 /var/
drwxr-xr-x 14 root root 4096 Dec 22 22:01 /var/log/
drwxr-x--- 2 elasticsearch elasticsearch 4096 Dec 22 21:25 /var/log/elasticsearch/

```

Hope that is useful in answering the original post! 🙂

---

<div class="post-metadata">

### Author: ![keddy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/keddy/32/39125_2.png) [@keddy](https://discuss.elastic.co/u/keddy)
#### Post date: [December 23, 2018, 3:14am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934/3 "2018-12-23T03:14:19Z")

</div>

The following is also returned when I check the status of Elasticsearch using `sudo service elasticsearch status`:

```auto
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Sat 2018-12-22 21:57:54 EST; 14min ago
     Docs: http://www.elastic.co
  Process: 31663 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet -Edefault.path.logs=${LOG_DIR} -Edefault.path.data=${DATA_DIR} -Edefault.path.conf=${CONF_DIR} (code=exited, status=1/FAILURE)
  Process: 31661 ExecStartPre=/usr/share/elasticsearch/bin/elasticsearch-systemd-pre-exec (code=exited, status=0/SUCCESS)
 Main PID: 31663 (code=exited, status=1/FAILURE)

```

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 28, 2018, 1:18am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934/4 "2018-12-28T01:18:21Z")

</div>

Is there anything in the Elasticsearch logs?

---

<div class="post-metadata">

### Author: ![keddy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/keddy/32/39125_2.png) [@keddy](https://discuss.elastic.co/u/keddy)
#### Post date: [December 28, 2018, 3:39am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934/5 "2018-12-28T03:39:49Z")

</div>

Hi Mark,

I was able to figure out the problem in my case. I was installing the eDirectory platform ([edirectory.com](http://edirectory.com)), which calls for ElasticSearch, but I accidentally installed a newer version of ES that isn't yet supported by eDirectory, and when I uninstalled the newer ES and installed the older version, the /var/tmp/elasticsearch folder was giving me trouble. I was able to solve the problem by uninstalling ES, deleting the folder, and reinstalling.

Thanks for following up! I really appreciate it!

[![](https://ka-p01.imgix.net/branding/brand-4x1-alpha-email-400x77.jpg?w=300)](https://keddyandassociates.com/?utm_source=SignatureBlock&utm_medium=Email&utm_campaign=Logo)

**Chris Holowatyj**

**Chief Development Officer**

**chris@keddy.ca | (905) 713-4520**

Sent using [Polymail](https://ply.ml/MAGNFT)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 25, 2019, 3:39am UTC](https://discuss.elastic.co/t/elasticsearch-fails-shortly-after-starting-centos-7-es-5-6-installed-using-rpm/161934/6 "2019-01-25T03:39:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
