Hello everybody! I get the following error when I try to send syslog data to Elasticsearch Index: [logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"arcsight-2020.06.11", :_type=>"syslog", :_routing=>nil}, #LogStash::Eve…

Could not index event to Elasticsearch.Rejecting mapping update to [] as the final mapping would have more than 1 type: [_doc,syslog]

cezar996 (Cezarr) June 24, 2020, 3:44pm 3

Hi @Badger and thank you very much for your reply!

This topic is related to my post discuss.elastic.co for which I have found the solution that implicitly solved this problem I posted here.

Topic		Replies	Views
Logstash configuration for new Version 6.5.4 Logstash	6	562	February 28, 2019
Logstash cannot index to Elasticsearch Logstash	7	957	May 17, 2018
Debug the message "Rejecting mapping update..." Elasticsearch	2	773	April 30, 2018
Could Not Index Event to Elasticsearch Error? Elasticsearch	8	38800	December 4, 2017
Could not index event to Elasticsearch after upgrade Logstash	5	646	October 20, 2019