WARN Can not index event (status=400): "RemoteTransportException[[es-elasticsearch-masters-1][inet[/10.42.8.185:9300]][indices:admin/create]]; nested: MapperParsingException[mapping [default]]; nested: MapperParsingException[No handler for type [keyword] declared on field [referrer]]; "
2017-06-21T09:10:39-07:00 WARN Can not index event (status=400): "RemoteTransportException[[es-elasticsearch-masters-1][inet[/10.42.8.185:9300]][indices:admin/create]]; nested: MapperParsingException[mapping [default]]; nested: MapperParsingException[No handler for type [keyword] declared on field [referrer]]; "
Filebeat.yml:
filebeat:
prospectors:
- input_type: log
paths:
- /var/log/*.log
registry_file: /var/lib/filebeat/registry
output.elasticsearch:
hosts: ["10.8.20.149:80/es"]
template.name: "filebeat"
template.path: "filebeat.template.json"
template.overwrite: false
output:
logstash:
hosts: ["localhost:5044"]