Filebeat 6.6 to ES 7.0

Looking to send logs from Filebeat 6.6 into Elasticsearch 7.0. The connection is established but then I get the following error message:

2019-04-30T14:08:17.472-0400 ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://elastic.ismfast.com:9200)): Connection marked as failed because the onConnect callback failed: Error loading Elasticsearch template: could not load template. Elasticsearch returned: couldn't load template: couldn't load json. Error: 400 Bad Request: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"Root mapping definition has unsupported parameters: [doc : {_meta={version=6.6.0}, dynamic_templates=[{fields={path_match=fields.*, mapping={type=keyword}, match_mapping_type=string}}, {docker.container.labels={path_match=docker.container.labels.*, mapping={type=keyword},

And it just keeps going like that running through what looks like every field stored in the template. Are Filebeat 6.6 templates not compatible with ES 7.0?

Thanks in advance!

Determined FB < v6.7 isn't compatible with ES 7.0. Answered my own question via https://www.elastic.co/support/matrix#matrix_compatibility

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.