# ES start error and logstash

**URL:** <https://discuss.elastic.co/t/es-start-error-and-logstash/144705>\
**Category:** Elasticsearch\
**Created:** [August 16, 2018, 11:36am UTC](https://discuss.elastic.co/t/es-start-error-and-logstash/144705 "2018-08-16T11:36:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arun\_Murugappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arun_murugappan/32/101630_2.png) [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Post date:** [August 16, 2018, 11:36am UTC](https://discuss.elastic.co/t/es-start-error-and-logstash/144705/1 "2018-08-16T11:36:58Z")

</div>

I am unable to start ES.

logstash v2. It is running on Java version 1.7, suse linux 11. How do i check and clear the diskspace of nodes?

Error while starting ES (not screenshots)

1. service elasticsearch start

Starting elasticsearch: start\_daemon: Empty pid file /var/run/elasticsearch/elasticsearch.pid for /srv/jas/app/elasticsearch/bin/elasticsearch  
done

linux-969h:/sysmgmt/opt/logstash # Exception in thread "main" ElasticsearchException[codec footer mismatch (file truncated?): actual footer=680781824 vs expected footer=-1071082520 (resource=BufferedChecksumIndexInput(SimpleFSIndexInput(path="/srv/jas/data/elasticsearch/DaimlerELK/nodes/0/indices/chinausecase/\_state/state-11.st")))]; nested: CorruptStateException[codec footer mismatch (file truncated?): actual footer=680781824 vs expected footer=-1071082520 (resource=BufferedChecksumIndexInput(SimpleFSIndexInput(path="/srv/jas/data/elasticsearch/DaimlerELK/nodes/0/indices/chinausecase/\_state/state-11.st")))];  
Likely root cause: org.elasticsearch.gateway.CorruptStateException: codec footer mismatch (file truncated?): actual footer=680781824 vs expected footer=-1071082520 (resource=BufferedChecksumIndexInput(SimpleFSIndexInput(path="/srv/jas/data/elasticsearch/DaimlerELK/nodes/0/indices/chinausecase/\_state/state-11.st")))  
at org.apache.lucene.codecs.CodecUtil.validateFooter(CodecUtil.java:416)  
at org.apache.lucene.codecs.CodecUtil.checkFooter(CodecUtil.java:331)  
at org.apache.lucene.codecs.CodecUtil.checksumEntireFile(CodecUtil.java:449)  
at org.elasticsearch.gateway.MetaDataStateFormat.read(MetaDataStateFormat.java:177)  
at org.elasticsearch.gateway.MetaDataStateFormat.loadLatestState(MetaDataStateFormat.java:299)  
at org.elasticsearch.gateway.MetaStateService.loadIndexState(MetaStateService.java:112)  
at org.elasticsearch.gateway.MetaStateService.loadFullState(MetaStateService.java:97)  
at org.elasticsearch.gateway.GatewayMetaState.loadMetaState(GatewayMetaState.java:97)  
at org.elasticsearch.gateway.GatewayMetaState.pre20Upgrade(GatewayMetaState.java:223)  
at org.elasticsearch.gateway.GatewayMetaState.(GatewayMetaState.java:85)  
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)  
at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)  
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)  
at java.lang.reflect.Constructor.newInstance(Unknown Source)  
at \<\<\>\>  
at org.elasticsearch.node.Node.(Node.java:198)  
at org.elasticsearch.node.NodeBuilder.build(NodeBuilder.java:145)  
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:170)  
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:270)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:35)

1. Error while running the logstash configuration file

Attempted to send a bulk request to Elasticsearch configured at '["[http://192.168.124.128:40200/](http://192.168.124.128:40200/)"]', but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Connection refused", :class=\>"Manticore::SocketException", :client\_config=\>{:hosts=\>["[http://192.168.124.128:40200/](http://192.168.124.128:40200/)"], :ssl=\>nil, :transport\_options=\>{:socket\_timeout=\>0, :request\_timeout=\>0, :proxy=\>nil, :ssl=\>{}}, :transport\_class=\>Elasticsearch::Transport::Transport::HTTP::Manticore, :headers=\>{"Authorization"=\>"Basic ZXNfYWRtaW46I2VsazIwIw=="}, :logger=\>nil, :tracer=\>nil, :reload\_connections=\>false, :retry\_on\_failure=\>false, :reload\_on\_failure=\>false, :randomize\_hosts=\>false}, :level=\>:error}

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [August 17, 2018, 9:30am UTC](https://discuss.elastic.co/t/es-start-error-and-logstash/144705/2 "2018-08-17T09:30:24Z")

</div>

please do not attach screenshots of your environment, but take the time to properly copy/paste logfiles in here, as those are much more readable and greppable.

Which Elasticsearch version is this? Which JVM are you running on? Have you run out of disk space on one that node recently?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 14, 2018, 9:30am UTC](https://discuss.elastic.co/t/es-start-error-and-logstash/144705/3 "2018-09-14T09:30:29Z")

</div>

Closed on September 14, 2018, 9:30am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
