I have the next Warning message when logstash tries to push data to Elasticsearch:
object mapping for [fields.args] tried to parse field [null] as object, but found a concrete value
I've noticed that in logs fields.args structure is being changed periodically.
In one case this is array:
fields.args: [9,"2020-03-03"]
In another case for example - this is mapping:
fields.args.id general_theme
May it be the reason of these warnings?
I use latest version of filebeat elasticsearch logstash and Kibana which is 7.6.0