# Elastic-agent fleet apache integration illegal\_argument\_exception

**URL:** <https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644>\
**Category:** Beats\
**Tags:** fleet\
**Created:** [January 20, 2021, 12:15pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644 "2021-01-20T12:15:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![gregorys](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gregorys/32/67574_2.png) [@gregorys](https://discuss.elastic.co/u/gregorys)\
**Post date:** [January 20, 2021, 12:15pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644/1 "2021-01-20T12:15:19Z")

</div>

Hi,

Running on 7.10.2.  
I have added the "Apache" integration to collect only logfiles, not metrics.  
When I go to discover to browse the logs-\* index, these errors appear:

```auto
1 of 8 shards failed
## illegal_argument_exception at `shard` 0 `index` .ds-logs-apache.access-default-000001 `node` 30iScyvDQLG7jd-CklbUhw
Reason
Field [event.created] of type [keyword] does not support custom formats

```

The request shows:

```auto
    {
      "field": "event.created",
      "format": "date_time"
    },

```

---

<div class="post-metadata">

**Author:** ![gregorys](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gregorys/32/67574_2.png) [@gregorys](https://discuss.elastic.co/u/gregorys)\
**Post date:** [January 20, 2021, 12:24pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644/2 "2021-01-20T12:24:20Z")

</div>

Never mind.  
When I create a new index pattern for the log-apache.access & log-apache.error data streams, it works fine.

---

<div class="post-metadata">

**Author:** ![Kaiyan\_Sheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kaiyan_sheng/32/38247_2.png) [@Kaiyan\_Sheng](https://discuss.elastic.co/u/Kaiyan_Sheng)\
**Post date:** [January 20, 2021, 8:35pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644/3 "2021-01-20T20:35:52Z")

</div>

I think you might find a bug here. I don't think the event.\* fields are added into the apache package. I will look into this. Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 17, 2021, 10:35pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644/4 "2021-02-17T22:35:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
