# Filebeat failed to create alias

**URL:** <https://discuss.elastic.co/t/filebeat-failed-to-create-alias/282625>\
**Category:** Beats\
**Tags:** docker, filebeat\
**Created:** [August 27, 2021, 4:44am UTC](https://discuss.elastic.co/t/filebeat-failed-to-create-alias/282625 "2021-08-27T04:44:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Daniel.X](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daniel.x/32/77408_2.png) [@Daniel.X](https://discuss.elastic.co/u/Daniel.X)\
**Post date:** [August 27, 2021, 4:44am UTC](https://discuss.elastic.co/t/filebeat-failed-to-create-alias/282625/1 "2021-08-27T04:44:14Z")

</div>

Hey there,

I'm running the filebeat docker container as a side container in my task definition on a container on AWS Fargate. I'm getting this error when filebeat is started. It used to work before, The only change I have made is I set the replica shard to 0 for my primary shards. And uncommented this block of code in my filebeat.yml file. Any ideas?

```auto
setup.template.settings:

  # A dictionary of settings to place into the settings.index dictionary
  # of the Elasticsearch template. For more details, please check
  # https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html
  index:
    number_of_shards: 1
    number_of_replicas: 0

```

Error produced in logs:

```auto
ERROR [index-management.ilm] ilm/std.go:128 Index Alias filebeat-pre setup failed: failed to create alias: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}: 400 Bad Request: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}.
2021-08-27T02:36:31.596Z ERROR instance/beat.go:989 Exiting: failed to create alias: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}: 400 Bad Request: {"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}],"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_doc]: unknown parameter [ignore_above] on mapper [first_seen] of type [date]","caused_by":{"type":"mapper_parsing_exception","reason":"unknown parameter [ignore_above] on mapper [first_seen] of type [date]"}},"status":400}

```

Specs:

- Filebeat:7.14.0 (xpack)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 24, 2021, 6:44am UTC](https://discuss.elastic.co/t/filebeat-failed-to-create-alias/282625/2 "2021-09-24T06:44:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.