# Elasticsearch service not running after downgrade from 7.16.2 to old version 6.4.2

**URL:** <https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666>\
**Category:** Elasticsearch\
**Created:** [January 28, 2022, 8:09am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666 "2022-01-28T08:09:15Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [January 28, 2022, 8:09am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/1 "2022-01-28T08:09:15Z")

</div>

Hi Everyone,

We were trying to upgrade our Elasticsearch from the 6.4.2 version to 7.16.2 due to log4j vulnerability but after the upgrade directly from 6.4.2 to 7.16.2 the Elasticsearch service was not running so we tried to downgrade to 6.4.2 by uninstalling the 7.16.2 and install the 6.4.2 but the Elasticsearch service is still not running.

Could you please help here?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 28, 2022, 10:22am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/2 "2022-01-28T10:22:44Z")

</div>

Welcome!

You can not downgrade.  
If you have followed the recommandations, you probably have backups (snapshots) so you could:

- Restore the cluster in 6.4.2
- Upgrade to 6.8.23 which contains the security fixes you need

Otherwise, you need to fix the actual problem you have with 7.16. For this, you could start by sharing your logs.

Please [read this](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) about how to format your logs.

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [January 28, 2022, 11:06am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/3 "2022-01-28T11:06:03Z")

</div>

Hi David,

Thanks for checking on this. So what you suggest now needs to be performed as we already uninstalled 7.16.2 and installed 6.4.2 where the Elasticsearch service is not executing. Could you please help to restore the cluster in 6.4.2?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 28, 2022, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/4 "2022-01-28T11:19:18Z")

</div>

Where are stored your snapshots?  
Where Elasticsearch is running? On premise?

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [January 28, 2022, 11:30am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/5 "2022-01-28T11:30:48Z")

</div>

In different Drives on the VM machine. Yes, it is on-prem.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 28, 2022, 11:39am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/6 "2022-01-28T11:39:43Z")

</div>

So reinstall a 6.4.2 cluster. Add again the repositories and use the restore endpoint.

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [January 28, 2022, 11:55am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/7 "2022-01-28T11:55:06Z")

</div>

I did reinstall the 6.4.2 Elasticsearch but due to the Elasticsearch service is not running not sure how to move ahead. Could you please let me know how I can "Add again the repositories and use the restore endpoint".

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 28, 2022, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/8 "2022-01-28T12:03:38Z")

</div>

Why Elasticsearch is not running again?  
Are you using the same data dir as previously? If so, your data dir has probably been upgraded to 7.16. That's why it can't start.

But check the logs.

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [January 28, 2022, 12:39pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/9 "2022-01-28T12:39:37Z")

</div>

Yes, we are using the same data directory only.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 28, 2022, 6:36pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/10 "2022-01-28T18:36:48Z")

</div>

So that won't work. You need to completely reinstall Elasticsearch. Which means an empty `data` dir before you start.  
Note that will remove all existing data.

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [January 31, 2022, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/11 "2022-01-31T12:19:24Z")

</div>

So we will get the data back from the restoration?

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [January 31, 2022, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/12 "2022-01-31T13:00:44Z")

</div>

What is your concern? What does "get the data back from the restoration" mean? If you created snapshot correctly, surely you will be able to restore the snapshot to the whole-new 6.4.2 cluster.

> **[Snapshot And Restore | Elasticsearch Guide \[6.8\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference//6.8/modules-snapshots.html)**

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [February 1, 2022, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/13 "2022-02-01T08:56:20Z")

</div>

Thanks for the details.

I am trying to uninstall Elasticsearch 6.4.2 but it is not uninstalled. It shows the getting information popup only but didn't uninstall at all.

![image](https://us1.discourse-cdn.com/elastic/original/3X/1/4/1400b1e20a72ebc480052e95108f02716240c98f.png)

---

<div class="post-metadata">

**Author:** ![rahulbansal](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Post date:** [February 7, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/14 "2022-02-07T12:52:56Z")

</div>

@ [dadoonet](https://discuss.elastic.co/u/dadoonet) Any suggestion on this as 6.4.2 Elasticsearch is not un-installing and I did delete the service as well but no luck.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 21, 2022, 4:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/15 "2022-02-21T16:34:05Z")

</div>

I have no idea. I think I did not touch windows for 10 years 😉

May be some manual removal is needed? Like going in the registry to remove the service and then remove the existing installation dir?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 21, 2022, 4:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666/16 "2022-03-21T16:34:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
