# Failed to put template \[filebeat\]

**URL:** <https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611>\
**Category:** Elasticsearch\
**Created:** [August 9, 2019, 12:45pm UTC](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611 "2019-08-09T12:45:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dm1987](https://avatars.discourse-cdn.com/v4/letter/d/ecc23a/32.png) [@dm1987](https://discuss.elastic.co/u/dm1987)\
**Post date:** [August 9, 2019, 12:45pm UTC](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611/1 "2019-08-09T12:45:59Z")

</div>

[2019-08-09T15:42:33,107][DEBUG][o.e.a.a.i.t.p.TransportPutIndexTemplateAction] failed to put template [filebeat]  
org.elasticsearch.index.mapper.MapperParsingException: Failed to parse mapping [\_doc]: Root mapping definition has unsupported parameters: [_default_ : {\_meta={version=5.5.1}, dynamic\_templates=[{strings\_as\_keyword={mapping={ignore\_above=1024, type=keyword}, match\_mapping\_type=string}}], \_all={norms=false}, date\_detection=false, properties={apache2={properties={access={properties={referrer={ignore\_above=1024, type=keyword}, agent={norms=false, type=text}, response\_code={type=long}, geoip={properties={continent\_name={ignore\_above=1024, type=keyword}, country\_iso\_code={ignore\_above=1024, type=keyword}, location={type=geo\_point}}}, remote\_ip={ignore\_above=1024, type=keyword}, method={ignore\_above=1024, type=keyword}, user\_name={ignore\_above=1024, type=keyword}, http\_version={ignore\_above=1024, type=keyword}, body\_sent={properties={bytes={type=long}}}, url={ignore\_above=1024, type=keyword}, user\_agent={properties={patch={ignore\_above=1024, type=keyword}, major={type=long}, minor={type=long}, os={ignore\_above=1024, type=keyword}, os\_minor={type=long}, os\_major={type=long}, name={ignore\_above=1024, type=keyword}, os\_name={ignore\_above=1024, type=keyword}, device={ignore\_above=1024, type=keyword}}}}}, error={properties={level={ignore\_above=1024, type=keyword}, module={ignore\_above=1024, type=keyword}, client={ignore\_above=1024, type=keyword}, pid={type=long}, message={norms=false, type=text}, tid={type=long}}}}}, nginx={properties={access={properties={referrer={ignore\_above=1024, type=keyword}, agent={norms=false, type=text}, response\_code={type=long}, geoip={properties={continent\_name={ignore\_above=1024, type=keyword}, country\_iso\_code={ignore\_above=1024, type=keyword}, location={type=geo\_point}}}, remote\_ip={ignore\_above=1024, type=keyword}, method={ignore\_above=1024, type=keyword}, user\_name={ignore\_above=1024, type=keyword}, http\_version={ignore\_above=1024, type=keyword}, body\_sent={properties={bytes={type=long}}}, url={ignore\_above=1024, type=keyword}, user\_agent={properties={patch={ignore\_above=1024, type=keyword}, major={type=long}, minor={type=long}, os={ignore\_above=1024, type=keyword}, os\_minor={type=long}, os\_major={type=long}, name={ignore\_above=1024, type=keyword}, os\_name={ignore\_above=1024, type=keyword}, device={ignore\_above=1024, type=keyword}}}}}, error={properties={connection\_id={type=long}, level={ignore\_above=1024, type=keyword}, pid={type=long}, message={norms=false, type=text}, tid={type=long}}}}}, offset={type=long}, input\_type={ignore\_above=1024, type=keyword}, read\_timestamp={ignore\_above=1024, type=keyword}, source={ignore\_above=1024, type=keyword}, auditd={properties={log={properties={new\_auid={ignore\_above=1024, type=keyword}, res={ignore\_above=1024, type=keyword}, item={ignore\_above=1024, type=keyword}, new\_ses={ignore\_above=1024, type=keyword}, geoip={properties={continent\_name={ignore\_above=1024, type=keyword}, city\_name={ignore\_above=1024, type=keyword}, country\_iso\_code={ignore\_above=1024, type=keyword}, location={type=geo\_point}, region\_name={ignore\_above=1024, type=keyword}}}, old\_ses={ignore\_above=1024, type=keyword}, pid={ignore\_above=1024, type=keyword}, record\_type={ignore\_above=1024, type=keyword}, a0={ignore\_above=1024, type=keyword}, ppid={ignore\_above=1024, type=keyword}, sequence={type=long}, old\_auid={ignore\_above=1024, type=keyword}, items={ignore\_above=1024, type=keyword}, acct={ignore\_above=1024, type=keyword}}}}}, error={ignore\_above=1024, type=keyword}, fileset={properties={module={ignore\_above=1024, type=keyword}, name={ignore\_above=1024, type=keyword}}}, message={norms=false, type=text}, type={ignore\_above=1024, type=keyword}, tags={ignore\_above=1024, type=keyword}, @timestamp={type=date}, system={properties={auth={properties={hostname={ignore\_above=1024, type=keyword}, ssh={properties={geoip={properties={continent\_name={ignore\_above=1024, type=keyword}, city\_name={ignore\_above=1024, type=keyword}, country\_iso\_code={ignore\_above=1024, type=keyword}, location={type=geo\_point}, region\_name={ignore\_above=1024, type=keyword}}}, dropped\_ip={type=ip}, method={ignore\_above=1024, type=keyword}, port={type=long}, signature={ignore\_above=1024, type=keyword}, ip={type=ip}, event={ignore\_above=1024, type=keyword}}}, pid={type=long}, program={ignore\_above=1024, type=keyword}, sudo={properties={tty={ignore\_above=1024, type=keyword}, error={ignore\_above=1024, type=keyword}, pwd={ignore\_above=1024, type=keyword}, user={ignore\_above=1024, type=keyword}, command={ignore\_above=1024, type=keyword}}}, groupadd={properties={gid={type=long}, name={ignore\_above=1024, type=keyword}}}, message={ignore\_above=1024, type=keyword}, useradd={properties={uid={type=long}, gid={type=long}, shell={ignore\_above=1024, type=keyword}, name={ignore\_above=1024, type=keyword}, home={ignore\_above=1024, type=keyword}}}, user={ignore\_above=1024, type=keyword}, timestamp={ignore\_above=1024, type=keyword}}}, syslog={properties={hostname={ignore\_above=1024, type=keyword}, pid={ignore\_above=1024, type=keyword}, program={ignore\_above=1024, type=keyword}, message={ignore\_above=1024, type=keyword}, timestamp={ignore\_above=1024, type=keyword}}}}}, meta={properties={cloud={properties={machine\_type={ignore\_above=1024, type=keyword}, availability\_zone={ignore\_above=1024, type=keyword}, instance\_id={ignore\_above=1024, type=keyword}, project\_id={ignore\_above=1024, type=keyword}, provider={ignore\_above=1024, type=keyword}, region={ignore\_above=1024, type=keyword}}}}}, beat={properties={hostname={ignore\_above=1024, type=keyword}, name={ignore\_above=1024, type=keyword}, version={ignore\_above=1024, type=keyword}}}, mysql={properties={slowlog={properties={lock\_time={properties={sec={type=float}}}, rows\_sent={type=long}, rows\_examined={type=long}, ip={ignore\_above=1024, type=keyword}, query={ignore\_above=1024, type=keyword}, host={ignore\_above=1024, type=keyword}, id={type=long}, user={ignore\_above=1024, type=keyword}, query\_time={properties={sec={typ

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 6, 2019, 12:57pm UTC](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611/2 "2019-09-06T12:57:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.