log a has field "ts" of type float
log b has field "ts" of type date
This is causing a WARN - cannot create index
Ideally, I don't want to have to drop one of the logs, so I wanted to create a index specifically for log b which is only coming from a certain pod. This are the indeces I have made
if you are ok with using same index just moving the conflicting field.
you can use the rename processor.
you can tell it to move the field_x to field_a if condition A was met
Before re ingesting you need to delete old index so that it will create a new with specific field type. Make sure a and b log going in dedicated index.
After getting error just check the mapping of an index. Usually this happen if you trying to ingest multi type of data on single field.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.