Most of the events are dropped with below error:
{\"type\":\"document_parsing_exception\",\"reason\":\"[1:1475] failed to parse field [netflow.flow_id] of type [long] in document with id 'M7a4XZYB_Zr7jpsbS6pn'. Preview of field's value: '11133470849011551241'\",\"caused_by\":{\"type\":\"x_content_parse_exception\",\"reason\":\"[1:1495] Numeric value (11133470849011551241) out of range of long (-9223372036854775808 - 9223372036854775807)\\n
As per standard, netflow.flow_id is unsigned64. But Filebeat incorrectly uses 'long' type for that field.
Need a way to either modify it to 'unsigned long' on Filebeat or elasticsearch. Tried configuring processor to convert this to string and write it in a new field and then drop the old field. Even after doing that, I'm still seeing lots of events dropped messages in /var/log/filebeat/*ndjson file.