# I can't find elastic log

**URL:** <https://discuss.elastic.co/t/i-cant-find-elastic-log/117557>\
**Category:** Elasticsearch\
**Created:** [January 30, 2018, 2:21am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557 "2018-01-30T02:21:24Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![yuluopiaoyang](https://avatars.discourse-cdn.com/v4/letter/y/bbce88/32.png) [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Post date:** [January 30, 2018, 2:21am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/1 "2018-01-30T02:21:24Z")

</div>

I just config path.logs in elasticsearch.yml, the path was generated,but the path is empty, I can't find the log file. Why the log file is empty? Below is my config:

[cluster.name](http://cluster.name): mushroomcluster  
[node.name](http://node.name): node01  
path.logs: /usr/share/elasticsearch/test

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 30, 2018, 2:27am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/2 "2018-01-30T02:27:15Z")

</div>

Why did you set it to that?  
Does the user that runs the Elasticsearch process have write access to it?

---

<div class="post-metadata">

**Author:** ![yuluopiaoyang](https://avatars.discourse-cdn.com/v4/letter/y/bbce88/32.png) [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Post date:** [January 30, 2018, 2:35am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/3 "2018-01-30T02:35:16Z")

</div>

First I set /usr/share/elasticsearch/logs, I found the path is exist and empty. Then I changed the config to prove the config is effective, and I found the new path "test" is generated. Below is the path right:

drwxrwxr-x 2 elasticsearch root 4096 Jan 29 10:12 test

I think the Elasticsearch process can write to the path.  
Thank you for your respond!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 30, 2018, 4:14am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/4 "2018-01-30T04:14:49Z")

</div>

Why not just leave it at `/var/log/elasticsearch/`?

---

<div class="post-metadata">

**Author:** ![yuluopiaoyang](https://avatars.discourse-cdn.com/v4/letter/y/bbce88/32.png) [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Post date:** [January 30, 2018, 4:19am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/5 "2018-01-30T04:19:54Z")

</div>

OK.I will have a try.

---

<div class="post-metadata">

**Author:** ![yuluopiaoyang](https://avatars.discourse-cdn.com/v4/letter/y/bbce88/32.png) [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Post date:** [January 30, 2018, 12:11pm UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/6 "2018-01-30T12:11:14Z")

</div>

I set /var/log/elasticsearch/ and reinstall, but the elasticsearch pod can not work normally. Its status is error. I think elasticsearch process can not write to this path. By the way, I use docker image to install elasticsearch.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 30, 2018, 8:22pm UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/7 "2018-01-30T20:22:44Z")

</div>

Which docker image?

---

<div class="post-metadata">

**Author:** ![yuluopiaoyang](https://avatars.discourse-cdn.com/v4/letter/y/bbce88/32.png) [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Post date:** [January 31, 2018, 2:15am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/8 "2018-01-31T02:15:54Z")

</div>

elasticsearch.6.1.2.tar

elasticsearch latest 06f0d8328d66 6 weeks ago 538.9 MB

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 28, 2018, 2:16am UTC](https://discuss.elastic.co/t/i-cant-find-elastic-log/117557/9 "2018-02-28T02:16:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.