Whenever I am trying to start elasticsearch7.0 via systemctl it give me an error:
elasticsearch.service - Elasticsearch
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Fri 2019-05-10 17:27:53 IST; 1s ago
Docs: http://www.elastic.co
Process: 18806 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
Main PID: 18806 (code=exited, status=1/FAILURE)
Can you check for more error logs, i.e. using journalctl? I'm sure there is an exception and a full stack trace buried somewhere.
Thanks a lot!
i tried and all i get is this:
elasticsearch.service - Elasticsearch
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2019-05-13 12:28:59 IST; 1min 30s ago
Docs: http://www.elastic.co
Process: 15570 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
Main PID: 15570 (code=exited, status=1/FAILURE)
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,032 main ERROR Null object returned for RollingFile in Appenders.
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,032 main ERROR Unable to locate appender "rolling" for logger config "root"
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,033 main ERROR Unable to locate appender "index_indexing_slowlog_rolling" for logger config "index.indexing.slowlog.index"
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,033 main ERROR Unable to locate appender "audit_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail"
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,033 main ERROR Unable to locate appender "index_search_slowlog_rolling" for logger config "index.search.slowlog"
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,057 main ERROR Unable to locate appender "deprecated_audit_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.DeprecatedLoggingAuditTrail"
May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,057 main ERROR Unable to locate appender "deprecation_rolling" for logger config "org.elasticsearch.deprecation"
May 13 12:28:59 elk.rrcat.gov.in systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE
May 13 12:28:59 elk.rrcat.gov.in systemd[1]: Unit elasticsearch.service entered failed state.
May 13 12:28:59 elk.rrcat.gov.in systemd[1]: elasticsearch.service failed.
@Vikash_Singh1 @spinscale any solution, I'm also facing the same. Yesterday[at fresh install] it was fine. But today it's giving me this same error. Nothing was done head up the things by yesterday and today. 
Well you can delete the file in /var/lib/elasticsearch/nodes.....then restart elasticsearch using systemctl
can you tell me the way you installed Elasticseach and the distribution, this would aid a log in debugging.
Thanks!
also, is there any special locale configuration you have setup?
I've installed using .rpm file
did you change the log4j2.properties in your config directory in anyway?
oh, and one more thing, are you starting/stopping as root? (sorry for all the single questions, should have grouped them)
Nope.....I hadn't done any modification in log4j2 properties
Yes..I am starting and stopping as root
Ok, your setup seems pretty standard and ok. Was this an upgrade or a new installation?
Also, can you share the full output from the logfile/journalctl in a gist, maybe something is missing in the output that could give us a further hint.
It was a new installation....Problem was with elasticsearch 7.0
While installation I was getting error saying couldn't create file elasticsearch.keystore
can you share the full output of the systemd logs?
sudo systemctl start elasticsearch.service
could not find java in JAVA_HOME or bundled at /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.212.b04-0.el7_6.x86_64/jre/bin/java/bin/java
chown: cannot access ‘/etc/elasticsearch/elasticsearch.keystore’: No such file or directory
chmod: cannot access ‘/etc/elasticsearch/elasticsearch.keystore’: No such file or directory
md5sum: /etc/elasticsearch/elasticsearch.keystore: No such file or directory
warning: %posttrans(elasticsearch-0:7.0.1-1.x86_64) scriptlet failed, exit status 1
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.