FIlebeat MapperParsingException

WARN Can not index event (status=400): "RemoteTransportException[[es-elasticsearch-masters-1][inet[/10.42.8.185:9300]][indices:admin/create]]; nested: MapperParsingException[mapping [default]]; nested: MapperParsingException[No handler for type [keyword] declared on field [referrer]]; "
2017-06-21T09:10:39-07:00 WARN Can not index event (status=400): "RemoteTransportException[[es-elasticsearch-masters-1][inet[/10.42.8.185:9300]][indices:admin/create]]; nested: MapperParsingException[mapping [default]]; nested: MapperParsingException[No handler for type [keyword] declared on field [referrer]]; "

Filebeat.yml:

filebeat:

prospectors:

- input_type: log
  paths:
    - /var/log/*.log

registry_file: /var/lib/filebeat/registry

output.elasticsearch:
hosts: ["10.8.20.149:80/es"]
template.name: "filebeat"
template.path: "filebeat.template.json"
template.overwrite: false
output:
logstash:
hosts: ["localhost:5044"]

Issue resolved after loading index patterns into es cluster.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.