Hi, I have one cluster still on 5.6 that has been seeing this error, I would like to resolve it before starting my upgrade to 6 and beyond:
[http] is defined as an object in mapping [cloud_monitor] but this name is already used for a field in other types
I've read up as much as I can and have a general idea of what's going on, but still not sure where to fix it. I don't think I see a conflict in the referenced map, but maybe I'm wrong. This cluster is fed by logstash with new daily indexes, so I'm hoping I can try a fix and wait for it to be applied to the next new index. The http
block for the cloud_monitor
mapping is:
"http" : {
"properties" : {
"UA" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"bytes" : {
"type" : "long"
},
"cliIP" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"fwdHost" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"proto" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"protoVer" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"redirURL" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"reqCT" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"reqHost" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"reqLen" : {
"type" : "long"
},
"reqMethod" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"reqPath" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"reqPort" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"reqQuery" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"respCT" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"respLen" : {
"type" : "long"
},
"sslVer" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"status" : {
"type" : "text",
"norms" : false,
"fields" : {
"raw" : {
"type" : "keyword",
"ignore_above" : 256
}
}
}
}
},
Would there be another place where the conflict would show up? I appreciate whatever pointers you can give....
Thanks!
--Chris