Failing shard with illegal_argument_exception

Elastic Stack Elasticsearch
#1

Hi Everyone,

When I'm trying to filter some data in Kibana I'm getting this message "1 of 716 shards failed" with this explanation:

illegal_argument_exception at shard 0 
index metricbeat-7.15.0-2021.12.27
node bfnMWOKoTsikcLiPsxSAcw

There is also longer explanation like that:
"Reason

Text fields are not optimised for operations that require per-document field data like aggregations and sorting, so these operations are disabled by default. Please use a keyword field instead. Alternatively, set fielddata=true on [host.hostname] in order to load field data by uninverting the inverted index. Note that this can use significant memory."

This is my Request:

and Response:

When I will look at this index it looks like that:

Thank you for any help and hints in advance.

#2

Hi @obol89

reason for the failure is that type of the field "host.name" on the index is "text" type and the query requires terms aggregation on that field. I suppose the mappings is different from other successful indices.

#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.