# Elasticsearch Log error

**URL:** <https://discuss.elastic.co/t/elasticsearch-log-error/82388>\
**Category:** Elasticsearch\
**Created:** [April 14, 2017, 8:12am UTC](https://discuss.elastic.co/t/elasticsearch-log-error/82388 "2017-04-14T08:12:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mhalatuituia](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Post date:** [April 14, 2017, 8:12am UTC](https://discuss.elastic.co/t/elasticsearch-log-error/82388/1 "2017-04-14T08:12:10Z")

</div>

[2017-04-14 21:06:12,408][DEBUG][action.bulk] [Scarlet Scarab] [logstash-2017.04.14][3] failed to execute bulk item (index) index {[logstash-2017.04.14][cisco-asa][AVtrf4quYmYb-lA30IY4], source[{"message":"Built dynamic TCP translation from any:a.b.c.d/53074 to outside:w.x.y.z./18810\n","@version":"1","@timestamp":"2017-04-14T08:52:36.000Z","type":"cisco-asa","host":"e.f.g.h","syslog\_pri":"182","sysloghost":"ha-fw1","ciscotag":"ASA-6-305011","action":"Built","xlate\_type":"dynamic","protocol":"TCP","src\_interface":"any","src\_ip":"1.2.3.4","src\_port":"53074","src\_xlated\_interface":"outside","src\_xlated\_ip":"a.b.c.d","syslog\_severity\_code":6,"syslog\_facility\_code":22,"syslog\_facility":"local6","syslog\_severity":"informational"}]}  
java.lang.IllegalArgumentException: mapper [geoip.latitude] of different type, current\_type [double], merged\_type [float]

And i get No result found on Kibana.

However i get this from Logstash which i believe it is successfully parse my cisco ASAS syslog message

"message" =\> "Built dynamic TCP translation from any:a.b.c.d/49290 to outside:e.f.g.h/33841\n",  
"@version" =\> "1",  
"@timestamp" =\> "2017-04-14T08:32:56.000Z",  
"type" =\> "cisco-asa",  
"host" =\> "e.f.g.h",  
"syslog\_pri" =\> "182",  
"sysloghost" =\> "ha-fw1",  
"ciscotag" =\> "ASA-6-305011",  
"action" =\> "Built",  
"xlate\_type" =\> "dynamic",  
"protocol" =\> "TCP",  
"src\_interface" =\> "any",  
"src\_ip" =\> "e.f.g.h",  
"src\_port" =\> "49290",  
"src\_xlated\_interface" =\> "outside",  
"src\_xlated\_ip" =\> "a.b.c.d",  
"syslog\_severity\_code" =\> 6,  
"syslog\_facility\_code" =\> 22,  
"syslog\_facility" =\> "local6",  
"syslog\_severity" =\> "informational"

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 12, 2017, 8:21am UTC](https://discuss.elastic.co/t/elasticsearch-log-error/82388/2 "2017-05-12T08:21:28Z")

</div>

Closed on May 12, 2017, 8:21am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
