Unable to Start Elasticsearch

Elastic Stack Elasticsearch
1

OS:- RHEL 7
ES Version: 6.7
ā— elasticsearch.service - Elasticsearch
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Thu 2020-10-01 10:47:08 CEST; 23s ago
Docs: http://www.elastic.co
Process: 116535 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
Main PID: 116535 (code=exited, status=1/FAILURE)

Oct 01 10:47:08 FRAKHRPL105 elasticsearch[116535]: 2020-10-01 10:47:08,151 main ERROR Unable to locate appender "rolling" for logger config "root"
Oct 01 10:47:08 FRAKHRPL105 elasticsearch[116535]: 2020-10-01 10:47:08,152 main ERROR Unable to locate appender "index_indexing_slowlog_rolling" for logger config "index.indexing.slowlog.index"
Oct 01 10:47:08 FRAKHRPL105 elasticsearch[116535]: 2020-10-01 10:47:08,152 main ERROR Unable to locate appender "audit_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail"
Oct 01 10:47:08 FRAKHRPL105 elasticsearch[116535]: 2020-10-01 10:47:08,152 main ERROR Unable to locate appender "index_search_slowlog_rolling" for logger config "index.search.slowlog"
Oct 01 10:47:08 FRAKHRPL105 elasticsearch[116535]: 2020-10-01 10:47:08,152 main ERROR Unable to locate appender "deprecated_audit_rolling" for logger config "org.elasticsearch.xpack.security.audit.logfile.DeprecatedLoggingAuditTrail"
Oct 01 10:47:08 FRAKHRPL105 elasticsearch[116535]: 2020-10-01 10:47:08,153 main ERROR Unable to locate appender "deprecation_rolling" for logger config "org.elasticsearch.deprecation"

2

Do you have a valid logging config in your /etc/elasticsearch? Should have been installed with the RPM unless you installed this in some odd way.

1 Like
3

I have used RPM setup file and by the way i found the solution.

/var/lib/ellasticsearch/node --> i removed this and reinstalled again its worked:)

Thanks for your reply

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.