Elasticsearch Log error

[2017-04-14 21:06:12,408][DEBUG][action.bulk ] [Scarlet Scarab] [logstash-2017.04.14][3] failed to execute bulk item (index) index {[logstash-2017.04.14][cisco-asa][AVtrf4quYmYb-lA30IY4], source[{"message":"Built dynamic TCP translation from any:a.b.c.d/53074 to outside:w.x.y.z./18810\n","@version":"1","@timestamp":"2017-04-14T08:52:36.000Z","type":"cisco-asa","host":"e.f.g.h","syslog_pri":"182","sysloghost":"ha-fw1","ciscotag":"ASA-6-305011","action":"Built","xlate_type":"dynamic","protocol":"TCP","src_interface":"any","src_ip":"1.2.3.4","src_port":"53074","src_xlated_interface":"outside","src_xlated_ip":"a.b.c.d","syslog_severity_code":6,"syslog_facility_code":22,"syslog_facility":"local6","syslog_severity":"informational"}]}
java.lang.IllegalArgumentException: mapper [geoip.latitude] of different type, current_type [double], merged_type [float]

And i get No result found on Kibana.

However i get this from Logstash which i believe it is successfully parse my cisco ASAS syslog message

"message" => "Built dynamic TCP translation from any:a.b.c.d/49290 to outside:e.f.g.h/33841\n",
"@version" => "1",
"@timestamp" => "2017-04-14T08:32:56.000Z",
"type" => "cisco-asa",
"host" => "e.f.g.h",
"syslog_pri" => "182",
"sysloghost" => "ha-fw1",
"ciscotag" => "ASA-6-305011",
"action" => "Built",
"xlate_type" => "dynamic",
"protocol" => "TCP",
"src_interface" => "any",
"src_ip" => "e.f.g.h",
"src_port" => "49290",
"src_xlated_interface" => "outside",
"src_xlated_ip" => "a.b.c.d",
"syslog_severity_code" => 6,
"syslog_facility_code" => 22,
"syslog_facility" => "local6",
"syslog_severity" => "informational"

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.