# Elasticsearch starts then stops **URL:** \ **Category:** Elasticsearch\ **Created:** [July 7, 2018, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004 "2018-07-07T06:13:48Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![jb1462](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@jb1462](https://discuss.elastic.co/u/jb1462)\ **Post date:** [July 7, 2018, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004/1 "2018-07-07T06:13:48Z")
Hello, I have installed elasticsearch (elasticsearch-2.3.3-1) and kibana (kibana-4.5.1) on one of our VMs ( with RHEL 7.5). Kibana starts without any issue. However, elasticsearch starts and then dies. Here's what I see when I start elasticsearch: $ sudo systemctl start elasticsearch $ sudo systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: active (running) since Sat 2018-07-07 05:46:32 UTC; 8s ago Docs: [http://www.elastic.co](http://www.elastic.co) Process: 24261 ExecStartPre=/usr/share/elasticsearch/bin/elasticsearch-systemd-pre-exec (code=exited, status=0/SUCCESS) Main PID: 24263 (java) CGroup: /system.slice/elasticsearch.service └─24263 [java] ‣ 24263 [java] Jul 07 05:46:31 lma-portal systemd[1]: Starting Elasticsearch... Jul 07 05:46:32 lma-portal systemd[1]: Started Elasticsearch. $ sudo systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: signal) since Sat 2018-07-07 05:46:45 UTC; 6s ago Docs: [http://www.elastic.co](http://www.elastic.co) Process: 24263 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -Des.pidfile=${PID\_DIR}/elasticsearch.pid -Des.default.path.home=${ES\_HOME} -Des.default.path.logs=${LOG\_DIR} -Des.default.path.data=${DATA\_DIR} -Des.default.path.conf=${CONF\_DIR} (code=killed, signal=KILL) Process: 24261 ExecStartPre=/usr/share/elasticsearch/bin/elasticsearch-systemd-pre-exec (code=exited, status=0/SUCCESS) Main PID: 24263 (code=killed, signal=KILL) Jul 07 05:46:31 lma-portal systemd[1]: Starting Elasticsearch... Jul 07 05:46:32 lma-portal systemd[1]: Started Elasticsearch. Jul 07 05:46:45 lma-portal systemd[1]: elasticsearch.service: main process exited, code=killed, status=9/KILL Jul 07 05:46:45 lma-portal systemd[1]: Unit elasticsearch.service entered failed state. Jul 07 05:46:45 lma-portal systemd[1]: elasticsearch.service failed. /var/log/messages ... Jul 7 05:47:57 lma audispd: node=lma-portal type=USER\_CMD msg=audit(1530942477.707:31048): pid=24375 uid=325400240 auid=325400240 ses=2 subj=unconfined\_u:unconfined\_r:unconfined\_t:s0-s0:c0.c1023 msg='cwd="/opt/kibana/config" cmd=7461696C202D66202F7661722F6C6F672F6D65737361676573 terminal=pts/0 res=success' Jul 7 05:47:57 lma audispd: node=lma-portal type=CRED\_REFR msg=audit(1530942477.708:31049): pid=24375 uid=0 auid=325400240 ses=2 subj=unconfined\_u:unconfined\_r:unconfined\_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam\_env,pam\_localuser,pam\_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 7 05:47:57 lma audispd: node=lma-portal type=USER\_START msg=audit(1530942477.708:31050): pid=24375 uid=0 auid=325400240 ses=2 subj=unconfined\_u:unconfined\_r:unconfined\_t:s0-s0:c0.c1023 msg='op=PAM:session\_open grantors=pam\_keyinit,pam\_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:kibana","info"],"pid":24363,"name":"plugin:kibana","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:elasticsearch","info"],"pid":24363,"name":"plugin:elasticsearch","state":"yellow","message":"Status changed from uninitialized to yellow - Waiting for Elasticsearch","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:kbn\_vislib\_vis\_types","info"],"pid":24363,"name":"plugin:kbn\_vislib\_vis\_types","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["error","elasticsearch"],"pid":24363,"message":"Request error, retrying -- connect ECONNREFUSED 127.0.0.1:9200"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:markdown\_vis","info"],"pid":24363,"name":"plugin:markdown\_vis","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:metric\_vis","info"],"pid":24363,"name":"plugin:metric\_vis","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["warning","elasticsearch"],"pid":24363,"message":"Unable to revive connection: [http://localhost:9200/](http://localhost:9200/)"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["warning","elasticsearch"],"pid":24363,"message":"No living connections"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:elasticsearch","error"],"pid":24363,"name":"plugin:elasticsearch","state":"red","message":"Status changed from yellow to red - Unable to connect to Elasticsearch at [http://localhost:9200](http://localhost:9200).","prevState":"yellow","prevMsg":"Waiting for Elasticsearch"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:spyModes","info"],"pid":24363,"name":"plugin:spyModes","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:statusPage","info"],"pid":24363,"name":"plugin:statusPage","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["status","plugin:table\_vis","info"],"pid":24363,"name":"plugin:table\_vis","state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"} Jul 7 05:47:58 lma kibana: {"type":"log","@timestamp":"2018-07-07T05:47:58+00:00","tags":["listening","info"],"pid":24363,"message":"Server running at [http://0.0.0.0:5601](http://0.0.0.0:5601)"} ... I have checked and double checked my configuration files and can't find anything. Appreciate any help on this. Thanks. jb1462 ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [July 7, 2018, 7:21am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004/2 "2018-07-07T07:21:21Z")
Is there a specific reason you are running such an old version? Have you looked at `/var/log/elasticsearch/`? ---
**Author:** ![jb1462](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@jb1462](https://discuss.elastic.co/u/jb1462)\ **Post date:** [July 7, 2018, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004/3 "2018-07-07T11:10:26Z")
It's what's installed in all our other environments. There's a few log files in /etc/log/elasticsearch but they're all empty. $ ls -l /var/log/elasticsearch/ total 0 -rw-r--r--. 1 elasticsearch elasticsearch 0 Jul 6 05:55 lma-elk\_index\_indexing\_slowlog.log -rw-r--r--. 1 elasticsearch elasticsearch 0 Jul 6 05:55 lma-elk\_index\_search\_slowlog.log -rw-r--r--. 1 elasticsearch elasticsearch 0 Jul 6 05:55 lma-elk.log ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 4, 2018, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004/4 "2018-08-04T11:10:35Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.