Could not index event to Elasticsearch. {:status=>400

Elastic Stack Logstash
1

Hi There, i am using ELK-6.5.1 version and trying to create geo_point indexes for kibana visualization, I have updated below template in kibana dev-tools and getting below error can anyone help me on this ?

PUT _template/template_1
{
"index_patterns": ["file*", "citi*"],
"settings": {
"number_of_shards": 1
},
"mappings": {
"_doc": {
"_source": {
"enabled": false
},
"properties": {
"host_name": {
"type": "keyword"
},
"created_at": {
"type": "date",
"format": "EEE MMM dd HH:mm:ss Z YYYY"
}
}
}
}
}

[2019-09-18T06:24:00,752][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"file-2019.09.18", :_type=>"doc", :_routing=>nil}, #LogStash::Event:0x6c84cf36], :response=>{"index"=>{"_index"=>"file-2019.09.18", "_type"=>"doc", "_id"=>"680KQ20BoWPmlsvdvlOG", "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"Rejecting mapping update to [file-2019.09.18] as the final mapping would have more than 1 type: [_doc, doc]"}}}}

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.