Failed to put template [filebeat]

[2019-08-09T15:42:33,107][DEBUG][o.e.a.a.i.t.p.TransportPutIndexTemplateAction] failed to put template [filebeat]
org.elasticsearch.index.mapper.MapperParsingException: Failed to parse mapping [_doc]: Root mapping definition has unsupported parameters: [default : {_meta={version=5.5.1}, dynamic_templates=[{strings_as_keyword={mapping={ignore_above=1024, type=keyword}, match_mapping_type=string}}], _all={norms=false}, date_detection=false, properties={apache2={properties={access={properties={referrer={ignore_above=1024, type=keyword}, agent={norms=false, type=text}, response_code={type=long}, geoip={properties={continent_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, location={type=geo_point}}}, remote_ip={ignore_above=1024, type=keyword}, method={ignore_above=1024, type=keyword}, user_name={ignore_above=1024, type=keyword}, http_version={ignore_above=1024, type=keyword}, body_sent={properties={bytes={type=long}}}, url={ignore_above=1024, type=keyword}, user_agent={properties={patch={ignore_above=1024, type=keyword}, major={type=long}, minor={type=long}, os={ignore_above=1024, type=keyword}, os_minor={type=long}, os_major={type=long}, name={ignore_above=1024, type=keyword}, os_name={ignore_above=1024, type=keyword}, device={ignore_above=1024, type=keyword}}}}}, error={properties={level={ignore_above=1024, type=keyword}, module={ignore_above=1024, type=keyword}, client={ignore_above=1024, type=keyword}, pid={type=long}, message={norms=false, type=text}, tid={type=long}}}}}, nginx={properties={access={properties={referrer={ignore_above=1024, type=keyword}, agent={norms=false, type=text}, response_code={type=long}, geoip={properties={continent_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, location={type=geo_point}}}, remote_ip={ignore_above=1024, type=keyword}, method={ignore_above=1024, type=keyword}, user_name={ignore_above=1024, type=keyword}, http_version={ignore_above=1024, type=keyword}, body_sent={properties={bytes={type=long}}}, url={ignore_above=1024, type=keyword}, user_agent={properties={patch={ignore_above=1024, type=keyword}, major={type=long}, minor={type=long}, os={ignore_above=1024, type=keyword}, os_minor={type=long}, os_major={type=long}, name={ignore_above=1024, type=keyword}, os_name={ignore_above=1024, type=keyword}, device={ignore_above=1024, type=keyword}}}}}, error={properties={connection_id={type=long}, level={ignore_above=1024, type=keyword}, pid={type=long}, message={norms=false, type=text}, tid={type=long}}}}}, offset={type=long}, input_type={ignore_above=1024, type=keyword}, read_timestamp={ignore_above=1024, type=keyword}, source={ignore_above=1024, type=keyword}, auditd={properties={log={properties={new_auid={ignore_above=1024, type=keyword}, res={ignore_above=1024, type=keyword}, item={ignore_above=1024, type=keyword}, new_ses={ignore_above=1024, type=keyword}, geoip={properties={continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, location={type=geo_point}, region_name={ignore_above=1024, type=keyword}}}, old_ses={ignore_above=1024, type=keyword}, pid={ignore_above=1024, type=keyword}, record_type={ignore_above=1024, type=keyword}, a0={ignore_above=1024, type=keyword}, ppid={ignore_above=1024, type=keyword}, sequence={type=long}, old_auid={ignore_above=1024, type=keyword}, items={ignore_above=1024, type=keyword}, acct={ignore_above=1024, type=keyword}}}}}, error={ignore_above=1024, type=keyword}, fileset={properties={module={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}}}, message={norms=false, type=text}, type={ignore_above=1024, type=keyword}, tags={ignore_above=1024, type=keyword}, @timestamp={type=date}, system={properties={auth={properties={hostname={ignore_above=1024, type=keyword}, ssh={properties={geoip={properties={continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, location={type=geo_point}, region_name={ignore_above=1024, type=keyword}}}, dropped_ip={type=ip}, method={ignore_above=1024, type=keyword}, port={type=long}, signature={ignore_above=1024, type=keyword}, ip={type=ip}, event={ignore_above=1024, type=keyword}}}, pid={type=long}, program={ignore_above=1024, type=keyword}, sudo={properties={tty={ignore_above=1024, type=keyword}, error={ignore_above=1024, type=keyword}, pwd={ignore_above=1024, type=keyword}, user={ignore_above=1024, type=keyword}, command={ignore_above=1024, type=keyword}}}, groupadd={properties={gid={type=long}, name={ignore_above=1024, type=keyword}}}, message={ignore_above=1024, type=keyword}, useradd={properties={uid={type=long}, gid={type=long}, shell={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, home={ignore_above=1024, type=keyword}}}, user={ignore_above=1024, type=keyword}, timestamp={ignore_above=1024, type=keyword}}}, syslog={properties={hostname={ignore_above=1024, type=keyword}, pid={ignore_above=1024, type=keyword}, program={ignore_above=1024, type=keyword}, message={ignore_above=1024, type=keyword}, timestamp={ignore_above=1024, type=keyword}}}}}, meta={properties={cloud={properties={machine_type={ignore_above=1024, type=keyword}, availability_zone={ignore_above=1024, type=keyword}, instance_id={ignore_above=1024, type=keyword}, project_id={ignore_above=1024, type=keyword}, provider={ignore_above=1024, type=keyword}, region={ignore_above=1024, type=keyword}}}}}, beat={properties={hostname={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}}}, mysql={properties={slowlog={properties={lock_time={properties={sec={type=float}}}, rows_sent={type=long}, rows_examined={type=long}, ip={ignore_above=1024, type=keyword}, query={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, id={type=long}, user={ignore_above=1024, type=keyword}, query_time={properties={sec={typ

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.