created a small index with a @timestamp and three string fields, added couple of docs, picked up the index in K successfully, only trying to discover my docs in K fails with the error: 'Discover: Unable to parse/serialize body'
Wondering why, hints appreciated, TIA!
mapping:
# curl -XGET http://localhost:9200/annotation/_mapping/event?pretty
{
"annotation" : {
"mappings" : {
"event" : {
"_all" : {
"enabled" : true,
"omit_norms" : true
},
"dynamic_templates" : [ {
"template1" : {
"mapping" : {
"norms" : {
"enabled" : false
},
"ignore_above" : 64,
"index" : "not_analyzed",
"omit_norms" : true,
"type" : "{dynamic_type}",
"doc_values" : true
},
"match" : "*"
}
} ],
"properties" : {
"@timestamp" : {
"type" : "date",
"format" : "strict_date_optional_time||epoch_millis"
},
"descr" : {
"type" : "string",
"index" : "not_analyzed"
},
"tags" : {
"type" : "string",
"norms" : {
"enabled" : false
},
"analyzer" : "whitespace"
},
"title" : {
"type" : "string",
"index" : "not_analyzed"
}
}
}
}
}
}
a few docs:
# curl -XGET http://localhost:9200/annotation/_search?pretty -d '{query:{match_all:{}}}'
{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 5,
"successful" : 5,
"failed" : 0
},
"hits" : {
"total" : 2,
"max_score" : 1.0,
"hits" : [ {
"_index" : "annotation",
"_type" : "event",
"_id" : "2",
"_score" : 1.0,
"_source" : {
"@timestamp" : "2016-07-10T08:16:21.000Z",
"title" : "this is a test deployment",
"tags" : "mx9 deploy",
"descr" : "this is the description of the deployment"
}
}, {
"_index" : "annotation",
"_type" : "event",
"_id" : "1",
"_score" : 1.0,
"_source" : {
"@timestamp" : "2016-07-09T23:06:21.000Z",
"title" : "test title 4",
"tags" : "patch mx9",
"descr" : "this is the description of the patch"
}
} ]
}
}