Logstash can connect to the cluster fine and I can query http://mycluster/_template/ so it looks like the 400 is just about something in the template it doesn't like. I get this error: 2018-02-17T00:35:11,571][INFO ][logstash.outputs.elasticsearch] Installing elasticsearch template to _template/ii…

Remove the definition to the _all field and all include_in_all attributes. This should work... { "template": "logstash-iis*", "settings": { "number_of_shards": 5, "number_of_replicas": 1 }, "aliases": { "iis-request-logs": {} }, "order": 12, "mappings": { "doc": { …

ES gives me 400 for my index template but its seems to be validate

Elastic Stack Logstash

system (system) Closed March 19, 2018, 2:33am 5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Logstash.outputs.elasticsearch : Failed to install template Logstash	3	14359	November 20, 2018
"Failed to install template... contact Elasticsearch" Logstash	8	11135	July 6, 2017
Template is missing Elasticsearch	5	10786	July 5, 2017
"Validation Failed: 1: template is missing; Elasticsearch	3	17306	January 26, 2017
After ES upgrade to 5.6 logstash only gets 400 bad request [SOLVED] Logstash	2	1362	November 26, 2018

ES gives me 400 for my index template but its seems to be validate

Related topics