Error: Request to Elasticsearch failed

Elastic Stack Kibana
1

Dear colleagues.
could you help me to know the reason for below error
maybe you experienced it.

Error: Request to Elasticsearch failed: {"error":{"root_cause":[{"type":"illegal_state_exception","reason":"Field data loading is forbidden on [AckType]"}],"type":"search_phase_execution_exception","reason":"all shards failed","phase":"query","grouped":true,"failed_shards":[{"shard":0,"index":"logstash-2016.06.24","node":"Nq6k7rQURf6jf-fmWi4__A","reason":{"type":"illegal_state_exception","reason":"Field data loading is forbidden on [AckType]"}}]}}
at http://192.168.95.13:5601/bundles/kibana.bundle.js?v=9892:89408:39
at Function.Promise.try (http://192.168.95.13:5601/bundles/commons.bundle.js?v=9892:63866:23)
at http://192.168.95.13:5601/bundles/commons.bundle.js?v=9892:63835:31
at Array.map (native)
at Function.Promise.map (http://192.168.95.13:5601/bundles/commons.bundle.js?v=9892:63834:31)
at callResponseHandlers (http://192.168.95.13:5601/bundles/kibana.bundle.js?v=9892:89380:23)
at http://192.168.95.13:5601/bundles/kibana.bundle.js?v=9892:88885:17
at processQueue (http://192.168.95.13:5601/bundles/commons.bundle.js?v=9892:41839:29)
at http://192.168.95.13:5601/bundles/commons.bundle.js?v=9892:41855:28
at Scope.$eval (http://192.168.95.13:5601/bundles/commons.bundle.js?v=9892:43083:29)

Thank you in advance.

2

Make sure you are not created a visualization on an analyzed field. You should be able to resolve this by using the .raw version of the field in the aggregation.

This elasticsearch issue can provide more insights to what I believe you are experiencing:

1 Like
3

Thank you for the reference!
yes for the visualization i do not use an analyzed fields. raw data only.
But i see this warning from the Discover window if i expand each not raw but analyzed field .
do you mean this behavior is normal ?