Explicit object property settings question

Robert_Navarro · June 10, 2013, 9:44pm

If I have an object mapping that has a property explicitly set as a string,
why ES traverse the string children as objects?

Here is a copy of my ES error, mapping and the message that is causing the
error:

gist.github.com

https://gist.github.com/rnavarro/9fdb9023ad5988914bd9

Error

[2013-06-10 21:36:02,250][DEBUG][action.bulk              ] [logstash1] [logstash-2013.06.10][1] failed to execute bulk item (index) index {[logstash-2013.06.10][syslog][bwNK62ZGSJ2-j1SzPDkRlg], source[{"@source":"tcp://0.0.0.0:35385/","@tags":[],"@fields":{"account_id":"1234","connector_id":"1234","send":"http://google.com","receive":{"count":0,"results":[],"params":{"shop_id":"asdf","min_created":null,"max_created":null,"min_last_modified":"1370870618","max_last_modified":null,"limit":"25","offset":"0","page":null,"was_paid":null,"was_shipped":null},"type":"Receipt","pagination":{"effective_limit":25,"effective_offset":0,"next_offset":null,"effective_page":1,"next_page":null},"headers":"HTTP/1.0 200 OK  Date: Mon, 10 Jun 2013 21:34:24 GMT","keyString":"3yzkxa3k574h0q72oaoqeami"},"type":"connector-log-add","host":"co","pid":30182},"@timestamp":"2013-06-10T21:36:01.981Z","@source_host":"0.0.0.0","@source_path":"/","@message":" {\"account_id\":\"1234\",\"connector_id\":\"1234\",\"send\":\"http:\\/\\/google.com\",\"receive\":{\"count\":0,\"results\":[],\"params\":{\"shop_id\":\"asdf\",\"min_created\":null,\"max_created\":null,\"min_last_modified\":\"1370870618\",\"max_last_modified\":null,\"limit\":\"25\",\"offset\":\"0\",\"page\":null,\"was_paid\":null,\"was_shipped\":null},\"type\":\"Receipt\",\"pagination\":{\"effective_limit\":25,\"effective_offset\":0,\"next_offset\":null,\"effective_page\":1,\"next_page\":null},\"headers\":\"HTTP\\/1.0 200 OK  Date: Mon, 10 Jun 2013 21:34:24 GMT\",\"keyString\":\"3yzkxa3k574h0q72oaoqeami\"},\"type\":\"connector-log-add\",\"host\":\"asdfasdf\",\"pid\":30182}\n","@type":"syslog"}]}
org.elasticsearch.index.mapper.MapperParsingException: Failed to parse [@fields.receive]
        at org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:320)
        at org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(ObjectMapper.java:507)
        at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:449)
        at org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(ObjectMapper.java:507)
        at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:449)
        at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:486)
        at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:430)
        at org.elasticsearch.index.shard.service.InternalIndexShard.prepareCreate(InternalIndexShard.java:297)

This file has been truncated. show original

field json

"@fields":{
    "account_id": "1234",
    "connector_id": "1234",
    "send": "http://google.com",
    "receive": {
        "count": 0,
        "results": [],
        "params": {
            "shop_id": "asdf",
            "min_created": null,

This file has been truncated. show original

map

{
    "template": "logstash-*",
    "settings": {
        "index": {
            "query": {
                "default_field": "@message"
            },
            "store": {
                "compress": {
                    "stored": true,

This file has been truncated. show original

Any ideas on how to resolve this? @fields.receive should be read in as a
string, not an object

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.