Hello there, Since today at 2am my filebat was working well, now I got no more data and the following error messages: 2016-09-22T11:53:04+02:00 WARN Can not index event (status=400): "MapperParsingException[mapping [_default_]]; nested: MapperParsingException[No handler for type [keyword] declared…

toasti (Bastian) September 22, 2016, 12:56pm 6

I solved it, hope that is correct now:

Based on this post from Andrew I did the same with filebeat, also using the filebeat.yml from version 1.3.1:

Topic		Replies	Views
FIlebeat MapperParsingException Beats filebeat	2	820	July 19, 2017
Can not index events after upgrade Beats filebeat	2	708	February 1, 2018
Filebeat issue with "cannot index event - dropping event" Beats beats-module , filebeat	1	700	March 21, 2022
Filebeat Parsing error Beats filebeat	2	524	October 31, 2019
Mapper_parsing_exception in filebeat logs suddenly Beats filebeat	13	2154	April 19, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Filebeat no more working - Can not index event (status=400)

Related topics