Filebeat 5.3 sends to elasticsearch 7.0.1

Elastic Stack Beats
1

I send to elasticsearch 5.3 by using filebeat 5.3 before.Now, a new elasticsearch(7.0.1) is installed into a new server.When I want to sends to elasticsearch(7.0.1) by filebeat 5.3.It seems that because elasticsearch(7.0.1) cannot loads the index template from filebeat(5.3). I see it output the error as follow():

{
	"error": {
		"root_cause": [{
			"type": "mapper_parsing_exception",
			"reason": "Root mapping definition has unsupported parameters:  [_default_ : {_meta={version=5.3.0}, dynamic_templates=[{strings_as_keyword={m......"
		}],
		"type": "mapper_parsing_exception",
		"reason": "Failed to parse mapping [_doc]: Root mapping definition has unsupported parameters:  [_default_ : {_meta={version=5.3.0}, dynamic_templa......",
		"caused_by": {
			"type": "mapper_parsing_exception",
			"reason": "Root mapping definition has unsupported parameters:  [_default_ : {_meta={version=5.3.0}......"
		}
	},
	"status": 400
}

So-----
1.It looks like I should alter filebeat(5.3)'s filebeat.template.json.What should I do.
or
2.The question could not be settled inabstracto. Upgrading is the only way.
I hope who can give me some guidance.Thanks

2

Welcome! :slight_smile:

Check out https://www.elastic.co/support/matrix#matrix_compatibility, but you will need to upgrade.

3

Very thanks for your share!
I will update my Beats^* and Logstash^* based on the Support Matrix.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.