Can someone help me understand this error I am seeing? I switched my index from
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
to
index => "%{[fields][group]}-%{[@metadata][beat]}"
And now I get the error:
[2018-07-27T15:35:14,821][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"qa-metricbeat", :_type=>"doc", :_routing=>nil}, #<LogStash::Event:0x151bff6a>], :response=>{"index"=>{"_index"=>"qa-metricbeat", "_type"=>"doc", "_id"=>#######", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_state_exception", "reason"=>"No matching token for number_type [BIG_INTEGER]"}}}}}
Any help would be appreciated. Thanks.