# Failed to start elastic search

**URL:** https://discuss.elastic.co/t/failed-to-start-elastic-search/278983
**Category:** Elasticsearch
**Created:** [July 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983 "2021-07-18T09:16:56Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![Jedrick](https://avatars.discourse-cdn.com/v4/letter/j/a183cd/32.png) [@Jedrick](https://discuss.elastic.co/u/Jedrick)
#### Post date: [July 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/1 "2021-07-18T09:16:56Z")

</div>

Hi,

Good day.

Can you help me with my problem with elastic search?

Currently, i am building a Wazuh siem that uses elastic search functions.

As I checked, Filebeat, kibana services are running. But the elasticsearch service is not running.

I already stop and restart the elasticsearch service and reboot the VM.

But still, elastic search is not working.

In addition, i am using ubuntu- .ova in building siem (wazuh)

Error:

Failed to start elasticsearch.  
Unit elasticsearch.service entered failed state.  
elasticksearch.service failed

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/a/fa3747876b7d0995057709e0fca42f3a58892785.png)

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [July 18, 2021, 7:03pm UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/2 "2021-07-18T19:03:20Z")

</div>

As it says in the log message, `/var/log/elasticsearch/elasticsearch` should contain more information about what happened.

---

<div class="post-metadata">

### Author: ![Jedrick](https://avatars.discourse-cdn.com/v4/letter/j/a183cd/32.png) [@Jedrick](https://discuss.elastic.co/u/Jedrick)
#### Post date: [July 19, 2021, 12:49am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/3 "2021-07-19T00:49:09Z")

</div>

Hi, what can I do about it sir?

---

<div class="post-metadata">

### Author: ![Jedrick](https://avatars.discourse-cdn.com/v4/letter/j/a183cd/32.png) [@Jedrick](https://discuss.elastic.co/u/Jedrick)
#### Post date: [July 19, 2021, 12:49am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/4 "2021-07-19T00:49:21Z")

</div>

Please help me

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [July 19, 2021, 5:48am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/5 "2021-07-19T05:48:30Z")

</div>

Look in the log Joe pointed to and paste any errors or warnings from that here so we can help.

---

<div class="post-metadata">

### Author: ![Jedrick](https://avatars.discourse-cdn.com/v4/letter/j/a183cd/32.png) [@Jedrick](https://discuss.elastic.co/u/Jedrick)
#### Post date: [July 19, 2021, 6:46am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/6 "2021-07-19T06:46:23Z")

</div>

Here is the screen shot Logs

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d1854cf74144bd429bd7e0d9e16e4ae76af736a4.png)

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [July 19, 2021, 7:09am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/7 "2021-07-19T07:09:35Z")

</div>

Please do not post screen shots as they are hard to read and search. Instead copy and paste the log using the tools available. The section you shared does not contain any error so please show the full log.

---

<div class="post-metadata">

### Author: ![Jedrick](https://avatars.discourse-cdn.com/v4/letter/j/a183cd/32.png) [@Jedrick](https://discuss.elastic.co/u/Jedrick)
#### Post date: [July 19, 2021, 7:29am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/8 "2021-07-19T07:29:48Z")

</div>

Hi,

Could you help me on how can I see the logs that were needed?

---

<div class="post-metadata">

### Author: ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)
#### Post date: [July 19, 2021, 10:48am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/9 "2021-07-19T10:48:42Z")

</div>

Try this command  
**tail -f /var/log/elasticsearch/elasticsearch.log**  
from this command's o/p , copy paste the logs here.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 16, 2021, 10:48am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983/10 "2021-08-16T10:48:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
