# I am getting an error when I tried to restart elasticsearch service **URL:** \ **Category:** Elasticsearch\ **Created:** [March 17, 2016, 3:27pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726 "2016-03-17T15:27:57Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![rvaedex23](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\ **Post date:** [March 17, 2016, 3:27pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/1 "2016-03-17T15:27:57Z")
I removed elasticsearch and reinstalled it. When I tried to restart the service I get this error: elasticsearch.service - Starts and stops a single elasticsearch instance on this system Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled) Active: failed (Result: exit-code) since Thu 2016-03-17 11:07:41 EDT; 18s ago Docs: [http://www.elasticsearch.org](http://www.elasticsearch.org) Process: 3455 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -d -p /var/run/elasticsearch/elasticsearch.pid -Des.default.config=$CONF\_FILE -Des.default.path.home=$ES\_HOME -Des.default.path.logs=$LOG\_DIR -Des.default.path.data=$DATA\_DIR -Des.default.path.work=$WORK\_DIR -Des.default.path.conf=$CONF\_DIR (code=exited, status=1/FAILURE) Main PID: 16725 (code=exited, status=143) CGroup: /system.slice/elasticsearch.service Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: at java.nio.file.FileTreeWalker.walk(FileTreeWalker.java:322) Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: at java.nio.file.Files.walkFileTree(Files.java:2662) Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: at org.elasticsearch.common.logging.log4j.LogConfigurator.resolveConfig(LogConfigurator.java:142) Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: ... 4 more Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: log4j:WARN No appenders could be found for logger (bootstrap). Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: log4j:WARN Please initialize the log4j system properly. Mar 17 11:07:36 cba-vml-ops-elk01 elasticsearch[3455]: log4j:WARN See [http://logging.apache.org/log4j/1.2/faq.html#noconfig](http://logging.apache.org/log4j/1.2/faq.html#noconfig) for more info. Mar 17 11:07:41 cba-vml-ops-elk01 systemd[1]: elasticsearch.service: control process exited, code=exited status=1 Mar 17 11:07:41 cba-vml-ops-elk01 systemd[1]: Failed to start Starts and stops a single elasticsearch instance on this system. Mar 17 11:07:41 cba-vml-ops-elk01 systemd[1]: Unit elasticsearch.service entered failed state. Warning: Unit file changed on disk, 'systemctl daemon-reload' recommended. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 18, 2016, 4:40am UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/2 "2016-03-18T04:40:17Z")
Did you change any of the `path` variables in settings. ---
**Author:** ![rvaedex23](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\ **Post date:** [March 18, 2016, 12:46pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/3 "2016-03-18T12:46:59Z")
no. I just removed the package elasticsearch and then reinstalled it. Does the log indicate something wrong with the path? ---
**Author:** ![rvaedex23](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\ **Post date:** [March 18, 2016, 7:37pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/4 "2016-03-18T19:37:44Z")
I updated the permissions on the elasticsearch directory and that fixed the issue. It seems like there wasn't permission to access the nodes. ---
**Author:** ![MarkOStewart](https://avatars.discourse-cdn.com/v4/letter/m/898d66/32.png) [@MarkOStewart](https://discuss.elastic.co/u/MarkOStewart)\ **Post date:** [March 18, 2016, 8:44pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/5 "2016-03-18T20:44:08Z")
A couple things to try. Run this command as root systemctl daemon-reload so it reloads you systemctl configs. If systemctl is using old configs in memory it can mess things up. This command wil lreload the systemd process so that it no longer attempts to reference the old files and reverts back to using the new system copies. Now try to start elasticsearch. If it still will not start I have had (for some reason i never figured out) the elasticsearch username UID and Group GID change. I did an upgrade and when elasticsearch would not start I found a folder with old UID and GID numbers that were associated with the old Elasticsearch user. I guess the user was removed and re-added except with different UID and GID's . Check that the name is associated with the files that ES uses. chown recursively the folders to fix if you find files with UID/GID numbers instead of elasitcsearch:elasticsearch user group Also I have had trouble with the /etc/systemd/system/elasticsearch.service file. There were some differences that my new install didn' t like. You can try to run elasticsearch from the /usr/share/elasticsearch/bin folder and see if it will run as a standalone w/o calling it with systemctl as this will tell you it may or may not be problems with /etc/systemd/system/elasticsearch.service file. Last inspect the elasticsearch.yml file. It is probably ok but I would look closely at it just to be sure. I hope this helps some. I had several things that stopped my es.service from starting and it was somewhat time consuming to find. Good luck and let us know how it turns out. ---
**Author:** ![MarkOStewart](https://avatars.discourse-cdn.com/v4/letter/m/898d66/32.png) [@MarkOStewart](https://discuss.elastic.co/u/MarkOStewart)\ **Post date:** [March 18, 2016, 8:47pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/6 "2016-03-18T20:47:59Z")
I just saw your latest post. I had the reply to your post above typed out but had to go to a meeting and when I came back I proof read and sent, then I saw your new post. Like I thought it was associated with permissions. Sorry I didn't hit the reply button this AM, it may have saved some time. Maybe it will help someone else. Have a good weekend! Mark ---
**Author:** ![rvaedex23](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\ **Post date:** [March 21, 2016, 12:45pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/7 "2016-03-21T12:45:09Z")
You are absolutely right. The permissions on elasticsearch UID and GID were set as 755 and they couldn't write to the nodes directory. I changed permissions to 777 and that fixed it. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:06pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-when-i-tried-to-restart-elasticsearch-service/44726/8 "2017-07-05T23:06:38Z")