# ELK Issue while enabling x-pack

**URL:** <https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656>\
**Category:** Elasticsearch\
**Created:** [May 1, 2022, 6:55am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656 "2022-05-01T06:55:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![anubhav.bss](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@anubhav.bss](https://discuss.elastic.co/u/anubhav.bss)\
**Post date:** [May 1, 2022, 6:55am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656/1 "2022-05-01T06:55:25Z")

</div>

Hi Friends,

I am facing issue with ELK stack deployed on AWS ECS.

Whenever I am trying to connect enable x-pack feature, Elasticsearch and Kibana containers are not coming up. EC2 instance is behind Application load balancer.

Error in Target group of Elasticsearch is “service [es-services](https://eu-central-1.console.aws.amazon.com/ecs/home?region=eu-central-1#/clusters/prod/services/es-services) (instance i-096a3b81dcdfbf1b9) (port 9200) is unhealthy in target-group [TG-ES](https://eu-central-1.console.aws.amazon.com/ec2/v2/home?region=eu-central-1#TargetGroups:search=arn:aws:elasticloadbalancing:eu-central-1:627438539446:targetgroup/TG-ES/bb69193fb629990c) due to (reason Health checks failed with these codes: [401])” and error in Target group of Kibana “service [kb-services](https://eu-central-1.console.aws.amazon.com/ecs/home?region=eu-central-1#/clusters/prod/services/kb-services) (instance i-096a3b81dcdfbf1b9) (port 50186) is unhealthy in target-group [kibana-tg](https://eu-central-1.console.aws.amazon.com/ec2/v2/home?region=eu-central-1#TargetGroups:search=arn:aws:elasticloadbalancing:eu-central-1:627438539446:targetgroup/kibana-tg/7295368a8d91754c) due to (reason Health checks failed with these codes: [302])”.

Container log of Elasticsearch is “[2022-05-01T06:19:33,469][INFO][o.e.x.m.p.NativeController] [qlEfQvw] Native controller process has stopped - no new native processes can be started

2022-05-01 08:19:33

[2022-05-01T06:19:33,469][INFO][o.e.x.m.p.l.CppLogMessageHandler] [qlEfQvw] [controller/98] [Main.cc@148] Ml controller exiting

[2022-05-01T06:19:33,469][INFO][o.e.x.m.p.l.CppLogMessageHandler] [qlEfQvw] [controller/98] [Main.cc@148] Ml controller exiting

2022-05-01 08:19:33

[2022-05-01T06:19:33,374][INFO][o.e.x.w.WatcherService] [qlEfQvw] stopping watch service, reason [shutdown initiated]

[2022-05-01T06:19:33,374][INFO][o.e.x.w.WatcherService] [qlEfQvw] stopping watch service, reason [shutdown initiated]

”

Elasticsearch config is below

cluster.name: "prod"

bootstrap.memory\_lock: false

network.host: 0.0.0.0

network.publish\_host: _ec2:privateIp_

transport.publish\_host: _ec2:privateIp_

discovery.zen.hosts\_provider: ec2

discovery.ec2.tag.Elasticsearch: prod

discovery.ec2.endpoint: ec2.${REGION}.amazonaws.com

s3.client.default.endpoint: s3.${REGION}.amazonaws.com

cloud.node.auto\_attributes: true

cluster.routing.allocation.awareness.attributes: aws\_availability\_zone

xpack.security.enabled: true

xpack.security.transport.ssl.enabled: true

xpack.security.transport.ssl.verification\_mode: certificate

xpack.security.transport.ssl.client\_authentication: optional

xpack.security.transport.ssl.keystore.path: elastic-certificates.p12

xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

Elasticsearch version is 6.8.9

Thanks in advance for looking into this.

Best,  
Anubhav

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 5, 2022, 2:27am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656/2 "2022-05-05T02:27:15Z")

</div>

Welcome to our community! 😃

> [@anubhav.bss](#):
>
> Elasticsearch version is 6.8.9

FYI 6.8 is [EOL](https://www.elastic.co/support/eol) and you need to upgrade as a matter of urgency.

> [@anubhav.bss](#):
>
> Container log of Elasticsearch is

I think we'd need to see more of those logs please.

Please format your code/logs/config using the `</>` button, or markdown style back ticks. It helps to make things easy to read which helps us help you 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 2, 2022, 2:27am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656/3 "2022-06-02T02:27:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
