Tag Archives: Elasticsearch startup error

Elasticsearch Startup Error: main ERROR Unable to locate appender “rolling_old” for logger config “root”

Foreword: start elasticsearch in the test environment today to report an error. The error information is as follows:

main ERROR Unable to locate appender "rolling_old" for logger config "root"

It was because it was started with root for the first time. After the startup failed, it reported an error when switching users to start, because the file in the log directory belongs to root

Solution:

In the elasticsearch configuration file, find the directory where the logs are stored, change the user and group you belong to. Start it again and it's OK!
chown elk.elk -R /var/log/elasticsearch/

Elasticsearch startup error, bootstrap checks failed [How to Solve]

Modify the elasticsearch.yml configuration file to allow extranet access.

vim config/elasticsearch.yml
# Add

network.host: 0.0.0.0

Failed to start, check did not pass, error reported

[2018-05-18T17:44:59,658][INFO ][o.e.b.BootstrapChecks    ] [gFOuNlS] bound or publishing to a non-loopback address, enforcing bootstrap checks
ERROR: [2] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

[1]: max file descriptors [65535] for elasticsearch process is too low, increase to at least [65536]

Edit /etc/security/limits.conf and append the following.
* soft nofile 65536
* hard nofile 65536
You need to re-login to the user after modifying this file for it to take effect

[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

Edit /etc/sysctl.conf and append the following.
vm.max_map_count=655360
After saving, execute.

 

sysctl -p

Restart and done!

bin/elasticsearch