# Elasticsearch with x-pack installation **URL:** \ **Category:** Elasticsearch\ **Created:** [April 6, 2018, 6:46am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035 "2018-04-06T06:46:43Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 6:46am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/1 "2018-04-06T06:46:44Z")
[2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [aggs-matrix-stats] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [ingest-common] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [lang-expression] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [lang-groovy] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [lang-mustache] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [lang-painless] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [parent-join] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [percolator] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [reindex] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [transport-netty3] [2018-04-06T06:15:12,473][INFO][o.e.p.PluginsService] [1e85IX5] loaded module [transport-netty4] [2018-04-06T06:15:12,474][INFO][o.e.p.PluginsService] [1e85IX5] loaded plugin [x-pack] [2018-04-06T06:15:46,295][INFO][o.e.x.m.j.p.l.CppLogMessageHandler] [controller/59] [Main.cc@128] controller (64 bit): Version 5.6.8 (Build f703b1d52613ea) Copyright (c) 2018 Elasticsearch BV [2018-04-06T06:15:47,189][INFO][o.e.d.DiscoveryModule] [1e85IX5] using discovery type [zen] [2018-04-06T06:16:00,250][INFO][o.e.n.Node] initialized [2018-04-06T06:16:00,281][INFO][o.e.n.Node] [1e85IX5] starting ... [2018-04-06T06:16:02,939][INFO][o.e.t.TransportService] [1e85IX5] publish\_address {127.0.0.1:9300}, bound\_addresses {[::1]:9300}, {127.0.0.1:9300} [2018-04-06T06:16:03,100][WARN][o.e.b.BootstrapChecks] [1e85IX5] max virtual memory areas vm.max\_map\_count [65530] is too low, increase to at least [262144] [2018-04-06T06:16:04,850][INFO][o.e.m.j.JvmGcMonitorService] [1e85IX5] [gc][3] overhead, spent [620ms] collecting in the last [1.6s] [2018-04-06T06:16:06,779][INFO][o.e.c.s.ClusterService] [1e85IX5] new\_master {1e85IX5}{1e85IX5KTQOYaUUZ228FPg}{ahfpP3NJSGOIqCDBkLrE6A}{127.0.0.1}{127.0.0.1:9300}{ml.max\_open\_jobs=10, ml.enabled=true}, reason: zen-disco-elected-as-master ([0] nodes joined) [2018-04-06T06:16:07,126][INFO][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [1e85IX5] publish\_address {172.17.0.3:9200}, bound\_addresses {[::]:9200} [2018-04-06T06:16:07,127][INFO][o.e.n.Node] [1e85IX5] started [2018-04-06T06:16:10,721][ERROR][o.e.x.m.c.i.IndexStatsCollector] [1e85IX5] collector [index-stats] failed to collect data org.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE\_UNAVAILABLE/1/state not recovered / initialized]; [2018-04-06T06:16:14,575][INFO][o.e.g.GatewayService] [1e85IX5] recovered [3] indices into cluster\_state [2018-04-06T06:16:14,870][INFO][o.e.x.m.MachineLearningTemplateRegistry] [1e85IX5] successfully created .ml-state index template [2018-04-06T06:16:15,179][INFO][o.e.x.m.MachineLearningTemplateRegistry] [1e85IX5] successfully created .ml-meta index template [2018-04-06T06:16:15,529][INFO][o.e.x.m.MachineLearningTemplateRegistry] [1e85IX5] successfully created .ml-notifications index template [2018-04-06T06:16:16,875][INFO][o.e.x.m.MachineLearningTemplateRegistry] [1e85IX5] successfully created .ml-anomalies- index template [2018-04-06T06:16:25,649][INFO][o.e.c.r.a.AllocationService] [1e85IX5] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.kibana][0], [apt-2018.04.06][3]] ...]). [2018-04-06T06:16:26,026][INFO][o.e.l.LicenseService] [1e85IX5] license [2daa5bb9-fd0d-49b0-871a-b3838a458443] mode [trial] - valid [2018-04-06T06:16:26,657][INFO][o.e.m.j.JvmGcMonitorService] [1e85IX5] [gc][24] overhead, spent [353ms] collecting in the last [1.3s] [2018-04-06T06:16:27,249][INFO][o.e.c.m.MetaDataMappingService] [1e85IX5] [.kibana/elWkJqqaSBO4eUYf5xnvGg] create\_mapping [graph-workspace] [2018-04-06T06:16:32,923][INFO][o.e.c.m.MetaDataCreateIndexService] [1e85IX5] [.monitoring-es-6-2018.04.06] creating index, cause [auto(bulk api)], templates [.monitoring-es], shards [1]/[1], mappings [doc] [2018-04-06T06:16:33,871][INFO][o.e.c.m.MetaDataCreateIndexService] [1e85IX5] [.watches] creating index, cause [auto(bulk api)], templates [watches], shards [1]/[1], mappings [watch] [2018-04-06T06:16:35,554][INFO][o.e.c.m.MetaDataMappingService] [1e85IX5] [.watches/V8v3AnsHTlewKN1M1OnKTw] update\_mapping [watch] [2018-04-06T06:16:51,199][INFO][o.e.m.j.JvmGcMonitorService] [1e85IX5] [gc][48] overhead, spent [637ms] collecting in the last [1.4s] [2018-04-06T06:16:53,801][INFO][o.e.c.m.MetaDataCreateIndexService] [1e85IX5] [.monitoring-kibana-6-2018.04.06] creating index, cause [auto(bulk api)], templates [.monitoring-kibana], shards [1]/[1], mappings [doc] [2018-04-06T06:17:39,991][INFO][o.e.c.m.MetaDataCreateIndexService] [1e85IX5] [.monitoring-alerts-6] creating index, cause [auto(bulk api)], templates [.monitoring-alerts], shards [1]/[1], mappings [doc] [2018-04-06T06:17:40,138][INFO][o.e.c.m.MetaDataCreateIndexService] [1e85IX5] [.watcher-history-6-2018.04.06] creating index, cause [auto(bulk api)], templates [.watch-history-6], shards [1]/[1], mappings [doc] [2018-04-06T06:17:40,291][INFO][o.e.c.m.MetaDataMappingService] [1e85IX5] [.watcher-history-6-2018.04.06/rH-pC1axSjOk5KMvAf7xAg] update\_mapping [doc] [2018-04-06T06:17:40,410][INFO][o.e.c.m.MetaDataMappingService] [1e85IX5] [.watcher-history-6-2018.04.06/rH-pC1axSjOk5KMvAf7xAg] update\_mapping [doc] [2018-04-06T06:19:44,063][WARN][o.e.d.r.RestController] Content type detection for rest requests is deprecated. Specify the content type using the [Content-Type] header. [2018-04-06T06:19:45,384][WARN][o.e.d.r.RestController] Content type detection for rest requests is deprecated. Specify the content type using the [Content-Type] header. [2018-04-06T06:19:50,517][WARN][o.e.d.r.RestController] Content type detection for rest requests is deprecated. Specify the content type using the [Content-Type] header. [2018-04-06T06:19:51,744][WARN][o.e.d.r.RestController] Content type detection for rest requests is deprecated. Specify the content type using the [Content-Type] header. [2018-04-06T06:22:43,241][INFO][o.e.m.j.JvmGcMonitorService] [1e85IX5] [gc][399] overhead, spent [365ms] collecting in the last [1.3s] When I try to install x-pack on elasticserach it is throws this error I am not able to figure out what is wrong the main problem is my config file is not able to pull the logs because it says some connection refuse problem and status shown is 401. Please do let me know where M I going wrong ---
**Author:** ![Sravanthi\_N\_S\_CH](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sravanthi_n_s_ch/32/50473_2.png) [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\ **Post date:** [April 6, 2018, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/2 "2018-04-06T07:35:41Z")
> [@Gaurav\_Agarwal](#): > > max virtual memory areas vm.max\_map\_count [65530] is too low, increase to at least [262144] You have to set vm.max\_map\_count to 262144. What OS are you running this on ? ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/3 "2018-04-06T07:49:14Z")
The ELK setup is hosted on docker ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/4 "2018-04-06T07:52:34Z")
apart from the memory thing are there any changes required in the elasticsearch.yml file if we use x-pack feature ---
**Author:** ![Sravanthi\_N\_S\_CH](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sravanthi_n_s_ch/32/50473_2.png) [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\ **Post date:** [April 6, 2018, 8:41am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/5 "2018-04-06T08:41:52Z")
I don't think you will need any change in config to install x-pack. How much memory is your docker using right now ? ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/6 "2018-04-06T08:56:57Z")
around 120 gb My problem is that logstash is not able to pull logs after a certain point when I install x-pack on the ELK stack can u help me out as I am not able to figure out where I am going wrong ---
**Author:** ![Sravanthi\_N\_S\_CH](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sravanthi_n_s_ch/32/50473_2.png) [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\ **Post date:** [April 6, 2018, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/7 "2018-04-06T09:02:44Z")
Looking at your logs, the issue that I noticed is with max\_map\_count. Why don't you try fixing that and see what logs are you saying. Try sharing the complete log file. ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 9:37am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/10 "2018-04-06T09:37:05Z")
how do I change the virtual memory ---
**Author:** ![Sravanthi\_N\_S\_CH](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sravanthi_n_s_ch/32/50473_2.png) [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\ **Post date:** [April 6, 2018, 10:12am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/11 "2018-04-06T10:12:40Z")
If you are using mac. Try this [https://stackoverflow.com/questions/41192680/update-max-map-count-for-elasticsearch-docker-container-mac-host](https://stackoverflow.com/questions/41192680/update-max-map-count-for-elasticsearch-docker-container-mac-host) ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/12 "2018-04-06T10:13:00Z")
not using MAC ---
**Author:** ![Sravanthi\_N\_S\_CH](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sravanthi_n_s_ch/32/50473_2.png) [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\ **Post date:** [April 6, 2018, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/13 "2018-04-06T10:13:18Z")
I suspect logstash fails because it couldn't connect to elastic search. ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/14 "2018-04-06T10:13:50Z")
That is happening only when i install x-pack on the elk stack ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/15 "2018-04-06T10:14:12Z")
What does the content type refer to ---
**Author:** ![Sravanthi\_N\_S\_CH](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sravanthi_n_s_ch/32/50473_2.png) [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\ **Post date:** [April 6, 2018, 10:20am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/16 "2018-04-06T10:20:38Z")
If you are making any GET requests, then it is expecting header like 'Content-Type: application/json' did your x-pack installation succeed ? ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/17 "2018-04-06T10:23:44Z")
yes it did ---
**Author:** ![Gaurav\_Agarwal](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Post date:** [April 6, 2018, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/18 "2018-04-06T10:24:32Z")
![Capture12](https://us1.discourse-cdn.com/elastic/original/3X/4/a/4a550ca7a8f58746cf7f1439a449eda658f607f7.PNG) It did all this has come on the kibana window ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 4, 2018, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-installation/127035/19 "2018-05-04T10:24:36Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.