# Elasticsearch node does not starts **URL:** \ **Category:** Elasticsearch\ **Created:** [February 14, 2019, 1:50pm UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421 "2019-02-14T13:50:57Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![pszemesy](https://avatars.discourse-cdn.com/v4/letter/p/e8c25b/32.png) [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Post date:** [February 14, 2019, 1:50pm UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/1 "2019-02-14T13:50:57Z")
Hi All, I have a problem with starting one of my nodes. The ES runs on a cluster of 3 nodes (version 6.6). The node2 dosen't want to start up. When I start it from systemctl it seems to be running: > ● elasticsearch.service - Elasticsearch > Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) > Active: active (running) since Thu 2019-02-14 14:41:15 CET; 4s ago > Docs: [http://www.elastic.co](http://www.elastic.co) > Main PID: 20149 (java) > CGroup: /system.slice/elasticsearch.service > └─20149 /bin/java -Xms4g -Xmx4g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless... > > Feb 14 14:41:15 aspnaplod2 systemd[1]: Started Elasticsearch. But in few seconds it fails - without writing any character of logs. > ● elasticsearch.service - Elasticsearch > Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) > Active: failed (Result: exit-code) since Thu 2019-02-14 14:41:21 CET; 489ms ago > Docs: [http://www.elastic.co](http://www.elastic.co) > Process: 20149 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE) > Main PID: 20149 (code=exited, status=1/FAILURE) > > Feb 14 14:41:15 aspnaplod2 systemd[1]: Started Elasticsearch. > Feb 14 14:41:21 aspnaplod2 systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE > Feb 14 14:41:21 aspnaplod2 systemd[1]: Unit elasticsearch.service entered failed state. > Feb 14 14:41:21 aspnaplod2 systemd[1]: elasticsearch.service failed. Have you got any idea why it could happened? ---
**Author:** ![Ant](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ant/32/33267_2.png) [@Ant](https://discuss.elastic.co/u/Ant)\ **Post date:** [February 14, 2019, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/2 "2019-02-14T15:23:31Z")
is this a sepcific node or any time you try to start a second node? If any time you try and start a second node if you stop the first node are one of the other nodes able to start? what happens if you query the clusters health? curl -XGET -u {elasticuser}:{elasticpassword} "{elastichost}:9200/\_cluster/health" Is this a newely built cluster? Have you made any changes recently? Have you tried to explicity set a log file in the elasticsearch.yml file to see if anything populates? ---
**Author:** ![pszemesy](https://avatars.discourse-cdn.com/v4/letter/p/e8c25b/32.png) [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Post date:** [February 15, 2019, 6:08am UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/3 "2019-02-15T06:08:40Z")
Hi, Yes, the other nodes starts correctly. Health state is yellow now (unable to allocate some replica shards). This cluster is implemented in last November. The new addition in the elasticsearch.yml is the auditing extra added (xpack.security.audit.logfile.events.emit\_request\_body: true), although this addition is done on the other nodes also. On the node-2 there are some other components running without any problem (filebeat, metricbeat, logstash). The logfile location is set in the elasticsearch.yml (to a folder on different disk) - it is done at the beginning. ---
**Author:** ![Ant](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ant/32/33267_2.png) [@Ant](https://discuss.elastic.co/u/Ant)\ **Post date:** [February 15, 2019, 9:38am UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/4 "2019-02-15T09:38:34Z")
Certainly sounds a node specific issue then rather than the cluster as a whole. If you have made changes to the elasticsearch.yml file I'd start by rolling back to the old version that worked if you still have it and re-applying the change incase an error was introduced. if not, load up one of the known good ones side by side with your one that isn't working. Obviously there will be some differences for things like hostname, ip etc. but check everything to make sure you don't have a formating issue in there as it could be one entry is set wrong and throwing out everything else. Alternatly you can take the file from a good node and change the node specific variables for the one that is faulting. Keep a backup of the old file for reference if you do this. It's been a while since I had to do it so I can't remember the process but you could look up how to lauch it in a session rather than as a service so you see the errors on screen. It's drastic but if you really can't find your needle in a haystack as to why this isn't working there is always the option to rebuild the node, re-introduce it to the cluster and let it all ballance out. ---
**Author:** ![Tek\_Chand](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tek_chand/32/34318_2.png) [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Post date:** [February 15, 2019, 12:04pm UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/5 "2019-02-15T12:04:34Z")
@pszemesy, Can you please share your `elasticsearch.yml` config for the machine on which you are facing issue? Thanks. ---
**Author:** ![pszemesy](https://avatars.discourse-cdn.com/v4/letter/p/e8c25b/32.png) [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Post date:** [February 18, 2019, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/6 "2019-02-18T08:50:30Z")
Please find it below: > ``` > cluster.name: asp_development > node.name: aspnaplod2 > path.data: /data/elasticsearch > path.logs: /data/log/elasticsearch > network.host: _site_ > http.port: 9200 > discovery.zen.ping.unicast.hosts: ["999.999.999.141", "999.999.999.143"] > discovery.zen.minimum_master_nodes: 2 > xpack.security.enabled: true > xpack.security.transport.ssl.enabled: true > xpack.security.transport.ssl.verification_mode: certificate > xpack.security.transport.ssl.keystore.path: /etc/elasticsearch/cert/elastic-certificates.p12 > xpack.security.transport.ssl.truststore.path: /etc/elasticsearch/cert/elastic-certificates.p12 > xpack.notification.email.account: > idom_account: > profile: standard > smtp: > host: qwert.qwert.hu > port: 25 > user: asdf.asdf@qwert.hu > xpack.security.audit.enabled: true > xpack.security.audit.outputs: [index, logfile] > xpack.security.audit.logfile.events.emit_request_body: true > > ``` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 18, 2019, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421/7 "2019-03-18T08:50:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.