"main ERROR Null object" after update 5.6.1 => 6.0.1

Elastic Stack Elasticsearch
1

Hello,

after updating elastic, I get this error:

root@Lisa:~# service elasticsearch status
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Mon 2017-12-11 09:51:23 UTC; 8min ago
     Docs: http://www.elastic.co
  Process: 2250 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
 Main PID: 2250 (code=exited, status=1/FAILURE)

Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,532 main ERROR Null object returned for RollingFile in Appenders.
Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,532 main ERROR Null object returned for RollingFile in Appenders.
Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,533 main ERROR Null object returned for RollingFile in Appenders.
Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,533 main ERROR Unable to locate appender "rolling" for logger config "root"
Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,537 main ERROR Unable to locate appender "index_indexing_slowlog_rolling" for logger config "index.indexing.slowlog.index"
Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,537 main ERROR Unable to locate appender "index_search_slowlog_rolling" for logger config "index.search.slowlog"
Dec 11 09:51:23 Lisa elasticsearch[2250]: 2017-12-11 09:51:23,539 main ERROR Unable to locate appender "deprecation_rolling" for logger config "org.elasticsearch.deprecation"
Dec 11 09:51:23 Lisa systemd[1]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE
Dec 11 09:51:23 Lisa systemd[1]: elasticsearch.service: Unit entered failed state.
Dec 11 09:51:23 Lisa systemd[1]: elasticsearch.service: Failed with result 'exit-code'.

There were just this issue and i keep the original one (old) https://pastebin.com/qHXEQLnb. How can be fixed this?
Ubuntu 16.04.2 LTS

2

I think that something is not right with your log4j2.properties. Can you share it?

3

In elasticsearch.yml were path.logs: /path/to/logs and path.logs: /path/to/data paths. So I'd fixed them. But I'm surprised that the error message was not clearer. Error: wrong or missing log directory "path/to/logs" etc.

4

I am not sure what you mean, if I reproduce your situation I see:

2017-12-11 12:48:58,488 main ERROR Null object returned for RollingFile in Appenders.
2017-12-11 12:48:58,489 main ERROR Null object returned for RollingFile in Appenders.
2017-12-11 12:48:58,489 main ERROR Null object returned for RollingFile in Appenders.
2017-12-11 12:48:58,489 main ERROR Null object returned for RollingFile in Appenders.
2017-12-11 12:48:58,491 main ERROR Unable to locate appender "rolling" for logger config "root"
2017-12-11 12:48:58,491 main ERROR Unable to locate appender "index_indexing_slowlog_rolling" for logger config "index.indexing.slowlog.index"
2017-12-11 12:48:58,491 main ERROR Unable to locate appender "index_search_slowlog_rolling" for logger config "index.search.slowlog"
2017-12-11 12:48:58,491 main ERROR Unable to locate appender "deprecation_rolling" for logger config "org.elasticsearch.deprecation"
[2017-12-11T12:48:58,576][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: Unable to access 'path.logs' (/tmp/private)
	at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:134) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:121) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:69) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:134) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85) ~[elasticsearch-6.0.1.jar:6.0.1]
Caused by: java.lang.IllegalStateException: Unable to access 'path.logs' (/tmp/private)
	at org.elasticsearch.bootstrap.FilePermissionUtils.addDirectoryPath(FilePermissionUtils.java:70) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Security.addFilePermissions(Security.java:286) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Security.createPermissions(Security.java:248) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Security.configure(Security.java:121) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:207) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:322) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:130) ~[elasticsearch-6.0.1.jar:6.0.1]
	... 6 more
Caused by: java.nio.file.AccessDeniedException: /tmp/private
	at sun.nio.fs.UnixException.translateToIOException(UnixException.java:84) ~[?:1.8.0_144]
	at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102) ~[?:1.8.0_144]
	at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107) ~[?:1.8.0_144]
	at sun.nio.fs.UnixFileSystemProvider.checkAccess(UnixFileSystemProvider.java:308) ~[?:1.8.0_144]
	at org.elasticsearch.bootstrap.Security.ensureDirectoryExists(Security.java:403) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.FilePermissionUtils.addDirectoryPath(FilePermissionUtils.java:68) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Security.addFilePermissions(Security.java:286) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Security.createPermissions(Security.java:248) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Security.configure(Security.java:121) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:207) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:322) ~[elasticsearch-6.0.1.jar:6.0.1]
	at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:130) ~[elasticsearch-6.0.1.jar:6.0.1]
5

I think that instead of service elasticsearch status you would see the same if you checked journalctl -u elasticsearch.

6

Here is my output since yesterday till now - https://pastebin.com/xEdc7KLU AccessDeniedException not found in it. But I think that you find something else that could lead to wrong path in settings.