# Can not index events after upgrade

**URL:** <https://discuss.elastic.co/t/can-not-index-events-after-upgrade/115040>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 11, 2018, 9:00am UTC](https://discuss.elastic.co/t/can-not-index-events-after-upgrade/115040 "2018-01-11T09:00:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![qubusp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/qubusp/32/26282_2.png) [@qubusp](https://discuss.elastic.co/u/qubusp)\
**Post date:** [January 11, 2018, 9:00am UTC](https://discuss.elastic.co/t/can-not-index-events-after-upgrade/115040/1 "2018-01-11T09:00:15Z")

</div>

I am having the following issue:

```auto
2018-01-11T08:56:58Z WARN Can not index event (status=400): {"type":"mapper_parsing_exception","reason":"Failed to parse mapping [doc]: Mapping definition for [error] has unsupported parameters: [properties : {code={type=long}, message={norms=false, type=text}, type={ignore_above=1024, type=keyword}}]","caused_by":{"type":"mapper_parsing_exception","reason":"Mapping definition for [error] has unsupported parameters: [properties : {code={type=long}, message={norms=false, type=text}, type={ignore_above=1024, type=keyword}}]"}}

```

Furthermore the configuration looks very simple:

```auto
- type: log
  enabled: true
  paths:
    - /var/log/messages
    - /var/log/secure

setup.kibana:
      host: "kibanahost:5601"

output.elasticsearch:
      # Array of hosts to connect to.
      hosts: ["host1:9200", "host2:9200", "host3:9200"]
      loadbalance: true
      worker: 3
      pipeline: logs
      # Optional protocol and basic auth credentials.
      #protocol: "https"
      #username: "elastic"
      #password: "changeme"

```

Version: 6.1.1  
Issue started after the upgrade from 5.6 to 6.1.1

I am still not able to post anything to elasticsearch.

Please advise.

---

<div class="post-metadata">

**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\
**Post date:** [January 11, 2018, 6:09pm UTC](https://discuss.elastic.co/t/can-not-index-events-after-upgrade/115040/2 "2018-01-11T18:09:59Z")

</div>

Hey, can you post here the output of `GET _template/filebeat`?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 1, 2018, 9:00am UTC](https://discuss.elastic.co/t/can-not-index-events-after-upgrade/115040/3 "2018-02-01T09:00:39Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.