ES 5.6 "name is already used for a field in other types"

Hi, I have one cluster still on 5.6 that has been seeing this error, I would like to resolve it before starting my upgrade to 6 and beyond:

[http] is defined as an object in mapping [cloud_monitor] but this name is already used for a field in other types

I've read up as much as I can and have a general idea of what's going on, but still not sure where to fix it. I don't think I see a conflict in the referenced map, but maybe I'm wrong. This cluster is fed by logstash with new daily indexes, so I'm hoping I can try a fix and wait for it to be applied to the next new index. The http block for the cloud_monitor mapping is:

    "http" : {
      "properties" : {
        "UA" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "bytes" : {
          "type" : "long"
        },
        "cliIP" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "fwdHost" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "proto" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "protoVer" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "redirURL" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "reqCT" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "reqHost" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "reqLen" : {
          "type" : "long"
        },
        "reqMethod" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "reqPath" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "reqPort" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "reqQuery" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "respCT" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "respLen" : {
          "type" : "long"
        },
        "sslVer" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "status" : {
          "type" : "text",
          "norms" : false,
          "fields" : {
            "raw" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        }
      }
    },

Would there be another place where the conflict would show up? I appreciate whatever pointers you can give....

Thanks!

--Chris

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.