Failed to Query Elasticsearch error when starting Logserver

Symptoms will not start, and displays the following behavior.

[user@system logserv]$ pwd
[user@system logserv]$ ./
Failed to query elasticsearch

The Elasticsearch service will appear to be running when the services are checked, but the Kibana and Logserver services will not start.



The data/node that is actively being worked on has become corrupt.



Delete the node number by removing the corresponding folder located at \elasticsearch\nodes. After deleting the number from under nodes, Elasticsearch will recreate the nodes folder when starting the stack of ELK.


Example of the path that needed to be deleted:

Version history
Revision #:
9 of 9
Last update:
‎02-26-2019 03:47 AM
Updated by: