Filebeat failed to create alias

[Daniel.X]

Hey there,

I'm running the filebeat docker container as a side container in my task definition on a container on AWS Fargate. I'm getting this error when filebeat is started. It used to work before, The only change I have made is I set the replica shard to 0 for my primary shards. And uncommented this block of code in my filebeat.yml file. Any ideas?

setup.template.settings:

  # A dictionary of settings to place into the settings.index dictionary
  # of the Elasticsearch template. For more details, please check
  # https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html
  index:
    number_of_shards: 1
    number_of_replicas: 0

Error produced in logs:

ERROR   [index-management.ilm]  ilm/std.go:128  Index Alias filebeat-pre setup failed: failed to create alias: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}: 400 Bad Request: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}.
2021-08-27T02:36:31.596Z        ERROR   instance/beat.go:989    Exiting: failed to create alias: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}: 400 Bad Request: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}

Specs:

• Filebeat:7.14.0 (xpack)