# Unable to set elastic search log file path

**URL:** <https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812>\
**Category:** Elasticsearch\
**Created:** [September 10, 2019, 2:49am UTC](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812 "2019-09-10T02:49:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![abhishek\_Shetty](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhishek_shetty/32/46284_2.png) [@abhishek\_Shetty](https://discuss.elastic.co/u/abhishek_Shetty)\
**Post date:** [September 10, 2019, 2:49am UTC](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812/1 "2019-09-10T02:49:46Z")

</div>

I have installed elasticsearch, kibana of 6.8.2 version on centos using RPM file and I have enabled basic authentication.

I need to modify all log paths to /apps/log instead of /var. For now I did modify log path but logs are not visible yet. Request your help to fix the issue.

Permission of /apps/log dr-xr-xr-x. 19 root root 268 Aug 20 22:20 /

Permission of /var/log dr-xr-xr-x. 19 root root 268 Aug 20 22:20

```
 sudo systemctl status elasticsearch.service -l

```

● elasticsearch.service - Elasticsearch  
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)  
Active: active (running) since Mon 2019-09-09 18:09:42 PDT; 1h 38min ago  
Docs: [http://www.elastic.co](http://www.elastic.co)  
Main PID: 1431 (java)  
CGroup: /system.slice/elasticsearch.service  
├─1431 /bin/java -Xms1g -Xmx1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -Des.networkaddress.cache.ttl=60 -Des.networkaddress.cache.negative.ttl=10 -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djna.nosys=true -XX:-OmitStackTraceInFastThrow -Dio.netty.noUnsafe=true -Dio.netty.noKeySetOptimization=true -Dio.netty.recycler.maxCapacityPerThread=0 -Dlog4j.shutdownHookEnabled=false -Dlog4j2.disable.jmx=true -Djava.io.tmpdir=/tmp/elasticsearch-8129687830883605587 -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/lib/elasticsearch -XX:ErrorFile=/var/log/elasticsearch/hs\_err\_pid%p.log -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime -Xloggc:/var/log/elasticsearch/gc.log -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=32 -XX:GCLogFileSize=64m -Des.path.home=/usr/share/elasticsearch -Des.path.conf=/etc/elasticsearch -Des.distribution.flavor=default -Des.distribution.type=rpm -cp /usr/share/elasticsearch/lib/\* org.elasticsearch.bootstrap.Elasticsearch -p /var/run/elasticsearch/elasticsearch.pid --quiet  
└─1929 /usr/share/elasticsearch/modules/x-pack-ml/platform/linux-x86\_64/bin/controller

Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,621 main ERROR Null object returned for RollingFile in Appenders.  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,621 main ERROR Null object returned for RollingFile in Appenders.  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,621 main ERROR Null object returned for RollingFile in Appenders.  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,621 main ERROR Null object returned for RollingFile in Appenders.  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,622 main ERROR Unable to locate appender "rolling" for logger config "root"  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,623 main ERROR Unable to locate appender "index\_indexing\_slowlog\_rolling" for logger config "index.indexing.slowlog.index"  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,623 main ERROR Unable to locate appender "audit\_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail"  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,623 main ERROR Unable to locate appender "index\_search\_slowlog\_rolling" for logger config "index.search.slowlog"  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,629 main ERROR Unable to locate appender "deprecated\_audit\_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.DeprecatedLoggingAuditTrail"  
Sep 09 18:09:45 scdl-sduipa-001 elasticsearch[1431]: 2019-09-09 18:09:45,629 main ERROR Unable to locate appender "deprecation\_rolling" for logger config "org.elasticsearch.deprecation"

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 8, 2019, 2:49am UTC](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812/2 "2019-10-08T02:49:50Z")

</div>

Closed on October 8, 2019, 2:49am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
