Failed to parse field [[observer.hostname]]

[Badger]

See this answer. Once you have indexed a document in which [observer.hostname] is a string, any event in which [observer.hostname] is an object (a hash) will be rejected.