# ES - MARVEL 2.0 or 2.1 NOT working under OS WINDOWS 10 due to BOOTSTRAP

**URL:** <https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809>\
**Category:** Elasticsearch\
**Created:** [November 28, 2015, 6:04pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809 "2015-11-28T18:04:51Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![oguchi](https://avatars.discourse-cdn.com/v4/letter/o/e95f7d/32.png) [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Post date:** [November 28, 2015, 6:04pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/1 "2015-11-28T18:04:51Z")

</div>

ES - MARVEL will not work under WIN10 OS due to error / warning sounded in the first phrase found in the log:  
"  
[2015-11-28 09:45:48,879][WARN][bootstrap] unable to install syscall filter: syscall filtering not supported for OS: 'Windows 10'  
"  
Is there a fix or workaround?  
Thanks.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 28, 2015, 6:32pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/2 "2015-11-28T18:32:09Z")

</div>

It's only a warn. Why do you think it does not work?

---

<div class="post-metadata">

**Author:** ![oguchi](https://avatars.discourse-cdn.com/v4/letter/o/e95f7d/32.png) [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Post date:** [November 28, 2015, 8:14pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/3 "2015-11-28T20:14:31Z")

</div>

Why: because I have never successfully run ES-Marvel 2.0 or 2.1 on my win10 system. But, ES-Marvel 1.7.2 runs just fine. When I inspected the different logs, that was the first thing that was different.  
Here is the rest of the log for ES-Marvel 2.1 (truncated due to posting limitations):

[2015-11-28 09:45:48,879][WARN][bootstrap] unable to install syscall filter: syscall filtering not supported for OS: 'Windows 10'  
[2015-11-28 09:45:49,004][INFO][node] [OHNode-1] version[2.1.0], pid[2648], build[72cd1f1/2015-11-18T22:40:03Z]  
[2015-11-28 09:45:49,004][INFO][node] [OHNode-1] initializing ...  
[2015-11-28 09:45:49,129][INFO][plugins] [OHNode-1] loaded [license, marvel-agent], sites []  
[2015-11-28 09:45:49,144][INFO][env] [OHNode-1] using [1] data paths, mounts [[SSD4 (I:)]], net usable\_space [446.9gb], net total\_space [447.1gb], spins? [unknown], types [NTFS]  
[2015-11-28 09:45:50,187][INFO][node] [OHNode-1] initialized  
[2015-11-28 09:45:50,203][INFO][node] [OHNode-1] starting ...  
[2015-11-28 09:45:50,328][INFO][transport] [OHNode-1] publish\_address {127.0.0.1:9300}, bound\_addresses {127.0.0.1:9300}, {[::1]:9300}  
[2015-11-28 09:45:50,344][INFO][discovery] [OHNode-1] OHN\_ES/2s5zSEnCTAO8teWZSNxboA  
[2015-11-28 09:45:54,422][INFO][cluster.service] [OHNode-1] new\_master {OHNode-1}{2s5zSEnCTAO8teWZSNxboA}{127.0.0.1}{127.0.0.1:9300}{rack=n1}, reason: zen-disco-join(elected\_as\_master, [0] joins received)  
[2015-11-28 09:45:54,547][INFO][http] [OHNode-1] publish\_address {127.0.0.1:9200}, bound\_addresses {127.0.0.1:9200}, {[::1]:9200}  
[2015-11-28 09:45:54,547][INFO][node] [OHNode-1] started  
[2015-11-28 09:45:54,610][INFO][license.plugin.core] [OHNode-1] license [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx] - valid  
[2015-11-28 09:45:54,672][INFO][gateway] [OHNode-1] recovered [5] indices into cluster\_state  
[2015-11-28 09:45:54,972][WARN][index.translog] [OHNode-1] [.marvel-es-2015.11.28][0] failed to delete temp file I:\ES\OHN\_ES\nodes\0\indices.marvel-es-2015.11.28\0\translog\translog-299723250838168587.tlog  
java.nio.file.NoSuchFileException: I:\ES\OHN\_ES\nodes\0\indices.marvel-es-2015.11.28\0\translog\translog-299723250838168587.tlog  
at sun.nio.fs.WindowsException.translateToIOException(WindowsException.java:79)  
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:97)  
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:102)  
...  
at org.elasticsearch.index.shard.StoreRecoveryService.recoverFromStore(StoreRecoveryService.java:245)  
at org.elasticsearch.index.shard.StoreRecoveryService.access$100(StoreRecoveryService.java:56)  
at org.elasticsearch.index.shard.StoreRecoveryService$1.run(StoreRecoveryService.java:129)  
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)  
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)  
at java.lang.Thread.run(Thread.java:745)  
[2015-11-28 09:45:54,972][WARN][index.translog] [OHNode-1] [kib\_default.kibana][0] failed to delete temp file I:\ES\OHN\_ES\nodes\0\indices\kib\_default.kibana\0\translog\translog-3855994493814347510.tlog  
java.nio.file.NoSuchFileException: I:\ES\OHN\_ES\nodes\0\indices\kib\_default.kibana\0\translog\translog-3855994493814347510.tlog  
at sun.nio.fs.WindowsException.translateToIOException(WindowsException.java:79)  
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:97)  
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:102)

[2015-11-28 09:45:54,972][WARN][index.translog] [OHNode-1] [.marvel-es-data][0] failed to delete temp file I:\ES\OHN\_ES\nodes\0\indices.marvel-es-data\0\translog\translog-577979268686346510.tlog  
java.nio.file.NoSuchFileException: I:\ES\OHN\_ES\nodes\0\indices.marvel-es-data\0\translog\translog-577979268686346510.tlog  
at sun.nio.fs.WindowsException.translateToIOException(WindowsException.java:79)  
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:97)

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 28, 2015, 8:29pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/4 "2015-11-28T20:29:02Z")

</div>

Nothing seems related to marvel here. Why do you think Marvel is not running?

---

<div class="post-metadata">

**Author:** ![oguchi](https://avatars.discourse-cdn.com/v4/letter/o/e95f7d/32.png) [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Post date:** [November 28, 2015, 9:40pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/5 "2015-11-28T21:40:49Z")

</div>

ES-Marvel 2.1 (same for 2.0):  
After running Elasticsearch.bat (and getting the log I posted):  
On the browser, communicate with ES (all browsers: Firefox, Edge, Chrome) with: [http://localhost:9200](http://localhost:9200)  
Result:  
{  
"name" : "OHNode-1",  
"cluster\_name" : "OHN\_ES",  
"version" : {  
"number" : "2.1.0",  
"build\_hash" : "72cd1f1a3eee09505e036106146dc1949dc5dc87",  
"build\_timestamp" : "2015-11-18T22:40:03Z",  
"build\_snapshot" : false,  
"lucene\_version" : "5.3.1"  
},  
"tagline" : "You Know, for Search"  
}

So, we know the ES is connected and we are communicating with it.

Try to add Marvel with: [http://localhost:9200/\_plugin/Marvel](http://localhost:9200/_plugin/Marvel)  
Result: HTTP 404 error

Try again extending to SENSE with: [http://localhost:9200/\_plugin/Marvel/sense](http://localhost:9200/_plugin/Marvel/sense) OR [http://localhost:9200/\_plugin/Marvel/sense.html](http://localhost:9200/_plugin/Marvel/sense.html)  
Result: HTTP 404 error

Changing cases with Marvel and or Sense does not make any difference. Using any of the above mentioned browsers gets the same 404 result.

That's why I think it is a Marvel problem. I could be wrong -- in fact I am certain of it. But the important thing is a solution.  
I appreciate your attention, interest and efforts.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 28, 2015, 10:02pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/6 "2015-11-28T22:02:50Z")

</div>

This is totally expected. Marvel totally changed in 2.0. You need to read the doc.

You basically have to deploy a Kibana plugin.

---

<div class="post-metadata">

**Author:** ![oguchi](https://avatars.discourse-cdn.com/v4/letter/o/e95f7d/32.png) [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Post date:** [November 28, 2015, 11:36pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/7 "2015-11-28T23:36:04Z")

</div>

What "is totally expected": that I can't run ES-marvel-sense without Kibana? If that is so, perhaps that's first thing that should have been said about ES 2.0 and 2.1. I have in fact scoured the documentation provided and finding no answers, I turn to this forum.

In any case, even Kibana will not find Marvel as one of the plugins; I do have the latest Kibana installed and it is "healthy"; I can communicate with it alright on port 5601. Right now, I can't get past the "index profile" requirement; how do I get an index profile in ES 2.0 when I can't get ES- Marvel - Sense up and running?

If you have successfully installed and run ES-Marvel on WIN10, please let me know what / how you did it.  
Otherwise, if there is something I have missed in the reference you pointed out, please be kind enough to specifically point it out.

Thanks.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 29, 2015, 2:13am UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/8 "2015-11-29T02:13:42Z")

</div>

Did you read:

- [https://www.elastic.co/guide/en/sense/current/installing.html](https://www.elastic.co/guide/en/sense/current/installing.html)
- [https://www.elastic.co/guide/en/marvel/current/installing-marvel.html](https://www.elastic.co/guide/en/marvel/current/installing-marvel.html)

If there anything wrong when you install?

---

<div class="post-metadata">

**Author:** ![oguchi](https://avatars.discourse-cdn.com/v4/letter/o/e95f7d/32.png) [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Post date:** [November 29, 2015, 5:45am UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/9 "2015-11-29T05:45:32Z")

</div>

Thank you very much, David, for the links.  
I followed all the instructions:

1. I am up and running, thanks to you. Yes, indeed, something changed dramatically with ES 2.0 and above. It now appears that Kibana is the motherbase, to which ES and Marvel are "attached" and Sense, too. So I am running all the latest versions on WIN10!

2. How does Logstash get into the picture? Earlier, I did an installation but I obviously I don't find it as one of the Kibana apps. Is there another link you can direct me to so that I can install and configure it correctly (under Kibana?)

I don't know where you find the patience to do this; the least I can say is that I really do appreciate you.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 29, 2015, 7:13am UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/10 "2015-11-29T07:13:10Z")

</div>

There is no logstash app for Kibana.

---

<div class="post-metadata">

**Author:** ![oguchi](https://avatars.discourse-cdn.com/v4/letter/o/e95f7d/32.png) [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Post date:** [November 29, 2015, 8:41am UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/11 "2015-11-29T08:41:55Z")

</div>

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 11:35pm UTC](https://discuss.elastic.co/t/es-marvel-2-0-or-2-1-not-working-under-os-windows-10-due-to-bootstrap/35809/12 "2017-07-05T23:35:06Z")

</div>


