# Error while starting elasticsearch **URL:** \ **Category:** Elasticsearch\ **Created:** [May 10, 2019, 12:00pm UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551 "2019-05-10T12:00:01Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 10, 2019, 12:00pm UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/1 "2019-05-10T12:00:01Z")
Whenever I am trying to start elasticsearch7.0 via systemctl it give me an error: elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Fri 2019-05-10 17:27:53 IST; 1s ago Docs: [http://www.elastic.co](http://www.elastic.co) Process: 18806 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE) Main PID: 18806 (code=exited, status=1/FAILURE) ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 10, 2019, 12:02pm UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/2 "2019-05-10T12:02:23Z")
Can you check for more error logs, i.e. using `journalctl`? I'm sure there is an exception and a full stack trace buried somewhere. Thanks a lot! ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 13, 2019, 7:01am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/3 "2019-05-13T07:01:34Z")
i tried and all i get is this: elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Mon 2019-05-13 12:28:59 IST; 1min 30s ago Docs: [http://www.elastic.co](http://www.elastic.co) Process: 15570 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE) Main PID: 15570 (code=exited, status=1/FAILURE) May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,032 main ERROR Null object returned for RollingFile in Appenders. May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,032 main ERROR Unable to locate appender "rolling" for logger config "root" May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,033 main ERROR Unable to locate appender "index\_indexing\_slowlog\_rolling" for logger config "index.indexing.slowlog.index" May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,033 main ERROR Unable to locate appender "audit\_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail" May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,033 main ERROR Unable to locate appender "index\_search\_slowlog\_rolling" for logger config "index.search.slowlog" May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,057 main ERROR Unable to locate appender "deprecated\_audit\_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.DeprecatedLoggingAuditTrail" May 13 12:28:49 elk.rrcat.gov.in elasticsearch[15570]: 2019-05-13 12:28:49,057 main ERROR Unable to locate appender "deprecation\_rolling" for logger config "org.elasticsearch.deprecation" May 13 12:28:59 elk.rrcat.gov.in systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE May 13 12:28:59 elk.rrcat.gov.in systemd[1]: Unit elasticsearch.service entered failed state. May 13 12:28:59 elk.rrcat.gov.in systemd[1]: elasticsearch.service failed. ---
**Author:** ![narendral](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/narendral/32/47558_2.png) [@narendral](https://discuss.elastic.co/u/narendral)\ **Post date:** [May 24, 2019, 6:40am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/4 "2019-05-24T06:40:59Z")
@Vikash_Singh1 @spinscale any solution, I'm also facing the same. Yesterday[at fresh install] it was fine. But today it's giving me this same error. Nothing was done head up the things by yesterday and today. ☹ ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 24, 2019, 8:56am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/5 "2019-05-24T08:56:56Z")
Well you can delete the file in /var/lib/elasticsearch/nodes.....then restart elasticsearch using systemctl ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 28, 2019, 8:48am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/6 "2019-05-28T08:48:18Z")
can you tell me the way you installed Elasticseach and the distribution, this would aid a log in debugging. Thanks! ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 28, 2019, 8:49am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/7 "2019-05-28T08:49:34Z")
also, is there any special locale configuration you have setup? ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 28, 2019, 9:00am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/8 "2019-05-28T09:00:07Z")
I've installed using .rpm file ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 28, 2019, 11:35am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/9 "2019-05-28T11:35:08Z")
did you change the `log4j2.properties` in your `config` directory in anyway? ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 28, 2019, 11:37am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/10 "2019-05-28T11:37:09Z")
oh, and one more thing, are you starting/stopping as root? (sorry for all the single questions, should have grouped them) ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 29, 2019, 4:29am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/11 "2019-05-29T04:29:31Z")
Nope.....I hadn't done any modification in log4j2 properties ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 29, 2019, 4:29am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/12 "2019-05-29T04:29:56Z")
Yes..I am starting and stopping as root ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 29, 2019, 7:05am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/13 "2019-05-29T07:05:28Z")
Ok, your setup seems pretty standard and ok. Was this an upgrade or a new installation? Also, can you share the **full** output from the logfile/journalctl in a gist, maybe something is missing in the output that could give us a further hint. ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 29, 2019, 8:16am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/14 "2019-05-29T08:16:34Z")
It was a new installation....Problem was with elasticsearch 7.0 ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 29, 2019, 8:26am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/15 "2019-05-29T08:26:03Z")
While installation I was getting error saying couldn't create file elasticsearch.keystore ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [May 29, 2019, 8:51am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/16 "2019-05-29T08:51:53Z")
can you share the full output of the systemd logs? ---
**Author:** ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Post date:** [May 31, 2019, 7:38am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/17 "2019-05-31T07:38:18Z")
sudo systemctl start elasticsearch.service could not find java in JAVA\_HOME or bundled at /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.212.b04-0.el7\_6.x86\_64/jre/bin/java/bin/java chown: cannot access ‘/etc/elasticsearch/elasticsearch.keystore’: No such file or directory chmod: cannot access ‘/etc/elasticsearch/elasticsearch.keystore’: No such file or directory md5sum: /etc/elasticsearch/elasticsearch.keystore: No such file or directory warning: %posttrans(elasticsearch-0:7.0.1-1.x86\_64) scriptlet failed, exit status 1 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 29, 2019, 6:40am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch/180551/19 "2019-06-29T06:40:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.