# Could not index event to Elasticsearch after upgrade to 7.0.1

**URL:** https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641
**Category:** Logstash
**Created:** [June 20, 2019, 9:46am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641 "2019-06-20T09:46:59Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![strom18](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/strom18/32/48427_2.png) [@strom18](https://discuss.elastic.co/u/strom18)
#### Post date: [June 20, 2019, 9:46am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641/1 "2019-06-20T09:46:59Z")

</div>

Hello,

I have this following error since upgrade from 6.7.1 to 7.0.1 :

```
[2019-06-20T11:21:04,154][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"f5-2019.06.20", :_type=>"_doc", :routing=>nil}, #<LogStash::Event:0x4f935ae3>], :response=>{"index"=>{"_index"=>"f5-2019.06.20", "_type"=>"_doc", "_id"=>nil, "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"The [default] mapping cannot be updated on index [f5-2019.06.20]: defaults mappings are not useful anymore now that indices can have at most one type."}}}}

```

I tried to remove old logstash template but issue is still present

It seems to be an issue about template and maybe mapping, but i don't find why

Any help ?

---

<div class="post-metadata">

### Author: ![strom18](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/strom18/32/48427_2.png) [@strom18](https://discuss.elastic.co/u/strom18)
#### Post date: [June 20, 2019, 12:00pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641/2 "2019-06-20T12:00:09Z")

</div>

I found the issue.

We had some other template who used the default logstash template.  
We solve the issue by removing the template using logstash and logstash template.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 18, 2019, 12:12pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-after-upgrade-to-7-0-1/186641/3 "2019-07-18T12:12:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.