Server error bound or publishing to a non-loopback during ES start


I am parsing apache log file using fielbeat/logstash and pushing it to ES.

Everything is installed on one server which is LINUX SERVER. When starting ES, we are getting the following error

[2017-03-10T11:22:43,237][INFO ][o.e.n.Node ] [gqgggfb] starting ...
[2017-03-10T11:22:43,638][INFO ][o.e.t.TransportService ] [gqgggfb] publish_address {}, bound_addresses {}
> [2017-03-10T11:22:43,657][INFO ][o.e.b.BootstrapChecks ] [gqgggfb] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
> ERROR: bootstrap checks failed

The configuration in ES YML file is as follows:

---------------------------------- Network -----------------------------------

Set the bind address to a specific IP (IPv4 or IPv6):

Set a custom port for HTTP:

http.port: 9200

I am not use what is loopback IP and what needs to be done to resolve this error. as a result when we are accessing ES using , it doesn't open up.

Anything that we need to take care so that it works.


Just read completely the log line where bootstrap checks error is mentioned (you didn't share it).

The reason is explained. Fix it. Search for bootstrap checks in the reference guide and you will see more details.

The file shows following error:

max file descriptors [65535] for elasticsearch process is too low, increase to at least [65536]
max number of threads [1024] for user [grcuser] is too low, increase to at least [2048]
max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

Where do we set this parameters? Is it at server level or in YAML file we can set these?


At the start of server getting following error:

unable to install syscall filter:
java.lang.UnsupportedOperationException: seccomp unavailable: requires kernel 3.5+ with CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER compiled in

Do we need to upgrade kernel for this to work?

Please read

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.