# Get MapperParsingException failed to parse in 0.90.10

**URL:** <https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732>\
**Category:** Elasticsearch\
**Created:** [February 11, 2014, 3:12pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732 "2014-02-11T15:12:55Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stefan\_Sabolowitsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefan_sabolowitsch/32/48680_2.png) [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\
**Post date:** [February 11, 2014, 3:12pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/1 "2014-02-11T15:12:55Z")

</div>

Hi all,  
get MapperParsingException failed to parse in 0.90.10

[2014-02-11 16:05:09,402][DEBUG][action.bulk] [Thunderbolt]  
[logstash-2014.02.11][4] failed to execute bulk item (index) index  
{[logstash-2014.02.11][suricata][deuCC2bkRvehNSA62tuuHw],  
source[{"tags":["suricata"],"@version":1,"@timestamp":"2014-02-11T16:05:07.540+01:00","host":"[ipd1.felten-group.com](http://ipd1.felten-group.com)","file":{"filename":"/SpamResolverNG/SpamResolverNG.dll","magic":"data","state":"CLOSED","stored":false,"size":115},"message":"{"time":"02\/11\/2014-15:05:07.540410","event\_type":"file","src\_ip":"84.39.152.31","src\_port":80,"dest\_ip":"192.168.100.120","dest\_port":3255,"proto":"TCP","http":{"url":"\/SpamResolverNG\/SpamResolverNG.dll?DoNewRequest","hostname":"[resolver1.altn.ctmail.com](http://resolver1.altn.ctmail.com)","http\_refer":"","http\_user\_agent":"Mozilla\/4.0  
(compatible; Win32; Commtouch Http  
Client)"},"file":{"filename":"\/SpamResolverNG\/SpamResolverNG.dll","magic":"data","state":"CLOSED","stored":false,"size":115}}","type":"suricata","received\_at":"2014-02-11  
16:05:07  
+0100","event\_type":"file","src\_ip":"84.39.152.31","src\_port":80,"proto":"TCP","http":{"url":"/SpamResolverNG/SpamResolverNG.dll?DoNewRequest","hostname":"[resolver1.altn.ctmail.com](http://resolver1.altn.ctmail.com)","http\_refer":"","http\_user\_agent":"Mozilla/4.0  
(compatible; Win32; Commtouch Http  
Client)"},"dst\_ip":"192.168.100.120","dst\_port":3255,"geoip":{"ip":"84.39.152.31","country\_code2":"DE","country\_code3":"DEU","country\_name":"Germany","continent\_code":"EU","latitude":51.0,"longitude":9.0,"timezone":"Europe/Berlin","location":[9.0,51.0]}}]}  
org.elasticsearch.index.mapper.MapperParsingException: failed to parse  
[file]  
at  
org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:416)  
at  
org.elasticsearch.index.mapper.multifield.MultiFieldMapper.parse(MultiFieldMapper.java:204)  
at  
org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(ObjectMapper.java:514)  
at  
org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:456)  
at  
org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:516)  
at  
org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:460)  
at  
org.elasticsearch.index.shard.service.InternalIndexShard.prepareCreate(InternalIndexShard.java:353)  
at  
org.elasticsearch.action.bulk.TransportShardBulkAction.shardIndexOperation(TransportShardBulkAction.java:402)  
at  
org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:156)  
at  
org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction.performOnPrimary(TransportShardReplicationOperationAction.java:556)  
at  
org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(TransportShardReplicationOperationAction.java:426)  
at  
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)  
at  
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)  
at java.lang.Thread.run(Thread.java:701)  
Caused by: org.elasticsearch.ElasticSearchIllegalArgumentException: unknown  
property [filename]  
at  
org.elasticsearch.index.mapper.core.StringFieldMapper.parseCreateFieldForString(StringFieldMapper.java:310)  
at  
org.elasticsearch.index.mapper.core.StringFieldMapper.parseCreateField(StringFieldMapper.java:261)  
at  
org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:405)

and this is my mapping:

{  
"template" : "logstash-_",  
"settings" : {  
"index.refresh\_interval" : "5s",  
"analysis" : {  
"analyzer" : {  
"default" : {  
"type" : "standard",  
"stopwords" : "none"  
}  
}  
}  
},  
"mappings" : {  
"default" : {  
"\_all" : {"enabled" : true},  
"dynamic\_templates" : [ {  
"string\_fields" : {  
"match" : "_",  
"match\_mapping\_type" : "string",  
"mapping" : {  
"type" : "multi\_field",  
"fields" : {  
"{name}" : {"type": "string", "index" : "analyzed",  
"omit\_norms" : true },  
"raw" : {"type": "string", "index" : "not\_analyzed",  
"ignore\_above" : 256}  
}  
}  
}  
} ],  
"properties" : {  
"@version": { "type": "string", "index": "not\_analyzed" },  
"ipver":{"type":"long"},  
"protocol":{"type":"long"},  
"size":{"type":"long"},  
"sp":{"type":"long"},  
"stored":{"type":"boolean"},  
"@timestamp":{"type":"date", "format":"dateOptionalTime"},  
"dp":{"type":"long"},  
"rcvd":{"type":"long"},  
"sent":{"type":"long"},  
"sid":{"type":"long"},  
"policy\_id":{"type":"long"},  
"size":{"type":"long"},  
"ids\_priority":{"type":"long"},  
"duration":{"type":"long"},  
"src\_port":{"type":"long"},  
"src\_xlated\_port":{type: "long"},  
"dst\_port":{"type":"long"},  
"dst\_xlated\_port":{type: "long"},  
"TTL":{"type":"long"},  
"geoip" : {  
"type" : "object",  
"dynamic": true,  
"path": "full",  
"properties" : {  
"location" : { "type" : "geo\_point" }  
}  
}  
}  
}  
}  
}

Any idea ?  
thanks for any help here.  
Stefan

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/e0f01d48-9131-4e9a-9df5-e50e91e55ea2%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/e0f01d48-9131-4e9a-9df5-e50e91e55ea2%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Ivan](https://avatars.discourse-cdn.com/v4/letter/i/df788c/32.png) [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Post date:** [February 11, 2014, 7:47pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/2 "2014-02-11T19:47:08Z")

</div>

What is your current mapping? Use the GetMapping API.

The file field is an inner object, but you do not have one defined in your  
mapping. Very likely you already have indexed a document with the file  
field as another type.

--  
Ivan

On Tue, Feb 11, 2014 at 7:12 AM, Stefan Sabolowitsch \<  
[sabolowitschst@in-trier.de](mailto:sabolowitschst@in-trier.de)\> wrote:

> Hi all,  
> get MapperParsingException failed to parse in 0.90.10
> 
> [2014-02-11 16:05:09,402][DEBUG][action.bulk] [Thunderbolt]  
> [logstash-2014.02.11][4] failed to execute bulk item (index) index  
> {[logstash-2014.02.11][suricata][deuCC2bkRvehNSA62tuuHw],  
> source[{"tags":["suricata"],"@version":1,"@timestamp":"2014-02-11T16:05:07.540+01:00","host":"  
> [ipd1.felten-group.com](http://ipd1.felten-group.com)  
> ","file":{"filename":"/SpamResolverNG/SpamResolverNG.dll","magic":"data","state":"CLOSED","stored":false,"size":115},"message":"{"time":"02\/11\/2014-15:05:07.540410","event\_type":"file","src\_ip":"84.39.152.31","src\_port":80,"dest\_ip":"192.168.100.120","dest\_port":3255,"proto":"TCP","http":{"url":"\/SpamResolverNG\/SpamResolverNG.dll?DoNewRequest","hostname":"  
> [resolver1.altn.ctmail.com](http://resolver1.altn.ctmail.com)","http\_refer":"","http\_user\_agent":"Mozilla\/4.0  
> (compatible; Win32; Commtouch Http  
> Client)"},"file":{"filename":"\/SpamResolverNG\/SpamResolverNG.dll","magic":"data","state":"CLOSED","stored":false,"size":115}}","type":"suricata","received\_at":"2014-02-11  
> 16:05:07  
> +0100","event\_type":"file","src\_ip":"84.39.152.31","src\_port":80,"proto":"TCP","http":{"url":"/SpamResolverNG/SpamResolverNG.dll?DoNewRequest","hostname":"  
> [resolver1.altn.ctmail.com](http://resolver1.altn.ctmail.com)","http\_refer":"","http\_user\_agent":"Mozilla/4.0  
> (compatible; Win32; Commtouch Http  
> Client)"},"dst\_ip":"192.168.100.120","dst\_port":3255,"geoip":{"ip":"84.39.152.31","country\_code2":"DE","country\_code3":"DEU","country\_name":"Germany","continent\_code":"EU","latitude":51.0,"longitude":9.0,"timezone":"Europe/Berlin","location":[9.0,51.0]}}]}  
> org.elasticsearch.index.mapper.MapperParsingException: failed to parse  
> [file]  
> at  
> org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:416)  
> at  
> org.elasticsearch.index.mapper.multifield.MultiFieldMapper.parse(MultiFieldMapper.java:204)  
> at  
> org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(ObjectMapper.java:514)  
> at  
> org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:456)  
> at  
> org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:516)  
> at  
> org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:460)  
> at  
> org.elasticsearch.index.shard.service.InternalIndexShard.prepareCreate(InternalIndexShard.java:353)  
> at  
> org.elasticsearch.action.bulk.TransportShardBulkAction.shardIndexOperation(TransportShardBulkAction.java:402)  
> at  
> org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:156)  
> at  
> org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction.performOnPrimary(TransportShardReplicationOperationAction.java:556)  
> at  
> org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(TransportShardReplicationOperationAction.java:426)  
> at  
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)  
> at  
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)  
> at java.lang.Thread.run(Thread.java:701)  
> Caused by: org.elasticsearch.ElasticSearchIllegalArgumentException:  
> unknown property [filename]  
> at  
> org.elasticsearch.index.mapper.core.StringFieldMapper.parseCreateFieldForString(StringFieldMapper.java:310)  
> at  
> org.elasticsearch.index.mapper.core.StringFieldMapper.parseCreateField(StringFieldMapper.java:261)  
> at  
> org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:405)
> 
> and this is my mapping:
> 
> {  
> "template" : "logstash-_",  
> "settings" : {  
> "index.refresh\_interval" : "5s",  
> "analysis" : {  
> "analyzer" : {  
> "default" : {  
> "type" : "standard",  
> "stopwords" : "none"  
> }  
> }  
> }  
> },  
> "mappings" : {  
> "default" : {  
> "\_all" : {"enabled" : true},  
> "dynamic\_templates" : [ {  
> "string\_fields" : {  
> "match" : "_",  
> "match\_mapping\_type" : "string",  
> "mapping" : {  
> "type" : "multi\_field",  
> "fields" : {  
> "{name}" : {"type": "string", "index" : "analyzed",  
> "omit\_norms" : true },  
> "raw" : {"type": "string", "index" : "not\_analyzed",  
> "ignore\_above" : 256}  
> }  
> }  
> }  
> } ],  
> "properties" : {  
> "@version": { "type": "string", "index": "not\_analyzed" },  
> "ipver":{"type":"long"},  
> "protocol":{"type":"long"},  
> "size":{"type":"long"},  
> "sp":{"type":"long"},  
> "stored":{"type":"boolean"},  
> "@timestamp":{"type":"date", "format":"dateOptionalTime"},  
> "dp":{"type":"long"},  
> "rcvd":{"type":"long"},  
> "sent":{"type":"long"},  
> "sid":{"type":"long"},  
> "policy\_id":{"type":"long"},  
> "size":{"type":"long"},  
> "ids\_priority":{"type":"long"},  
> "duration":{"type":"long"},  
> "src\_port":{"type":"long"},  
> "src\_xlated\_port":{type: "long"},  
> "dst\_port":{"type":"long"},  
> "dst\_xlated\_port":{type: "long"},  
> "TTL":{"type":"long"},  
> "geoip" : {  
> "type" : "object",  
> "dynamic": true,  
> "path": "full",  
> "properties" : {  
> "location" : { "type" : "geo\_point" }  
> }  
> }  
> }  
> }  
> }  
> }
> 
> Any idea ?  
> thanks for any help here.  
> Stefan
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/e0f01d48-9131-4e9a-9df5-e50e91e55ea2%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/e0f01d48-9131-4e9a-9df5-e50e91e55ea2%40googlegroups.com)  
> .  
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDDcPo\_yzH%3DUfi4JOM8jgORvVQrMQ1wzV2aH2etSo\_x%3Dg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDDcPo_yzH%3DUfi4JOM8jgORvVQrMQ1wzV2aH2etSo_x%3Dg%40mail.gmail.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Stefan\_Sabolowitsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefan_sabolowitsch/32/48680_2.png) [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\
**Post date:** [February 11, 2014, 8:17pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/3 "2014-02-11T20:17:22Z")

</div>

Hi Ivan,  
thanks for your answer, i use as an indexer logstash.

this is my current mapping:

{  
"template" : "logstash-_",  
"settings" : {  
"index.refresh\_interval" : "5s",  
"analysis" : {  
"analyzer" : {  
"default" : {  
"type" : "standard",  
"stopwords" : "none"  
}  
}  
}  
},  
"mappings" : {  
"default" : {  
"\_all" : {"enabled" : true},  
"dynamic\_templates" : [ {  
"string\_fields" : {  
"match" : "_",  
"match\_mapping\_type" : "string",  
"mapping" : {  
"type" : "multi\_field",  
"fields" : {  
"{name}" : {"type": "string", "index" : "analyzed",  
"omit\_norms" : true },  
"raw" : {"type": "string", "index" : "not\_analyzed",  
"ignore\_above" : 256}  
}  
}  
}  
} ],  
"properties" : {  
"@version": { "type": "string", "index": "not\_analyzed" },  
"ipver":{"type":"long"},  
"protocol":{"type":"long"},  
"size":{"type":"long"},  
"sp":{"type":"long"},  
"stored":{"type":"boolean"},  
"@timestamp":{"type":"date", "format":"dateOptionalTime"},  
"dp":{"type":"long"},  
"rcvd":{"type":"long"},  
"sent":{"type":"long"},  
"sid":{"type":"long"},  
"policy\_id":{"type":"long"},  
"size":{"type":"long"},  
"ids\_priority":{"type":"long"},  
"duration":{"type":"long"},  
"src\_port":{"type":"long"},  
"src\_xlated\_port":{type: "long"},  
"dst\_port":{"type":"long"},  
"dst\_xlated\_port":{type: "long"},  
"TTL":{"type":"long"},  
"geoip" : {  
"type" : "object",  
"dynamic": true,  
"path": "full",  
"properties" : {  
"location" : { "type" : "geo\_point" }  
}  
}  
}  
}  
}  
}

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/7d0e5d29-4747-4dfa-9b79-9469e4814d91%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/7d0e5d29-4747-4dfa-9b79-9469e4814d91%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Ivan](https://avatars.discourse-cdn.com/v4/letter/i/df788c/32.png) [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Post date:** [February 11, 2014, 8:25pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/4 "2014-02-11T20:25:43Z")

</div>

That is your template. Use the Get Mapping API to find out what actually is  
in effect.

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

On Tue, Feb 11, 2014 at 12:17 PM, Stefan Sabolowitsch \<  
[sabolowitschst@in-trier.de](mailto:sabolowitschst@in-trier.de)\> wrote:

> Hi Ivan,  
> thanks for your answer, i use as an indexer logstash.
> 
> this is my current mapping:
> 
> {  
> "template" : "logstash-_",  
> "settings" : {  
> "index.refresh\_interval" : "5s",  
> "analysis" : {  
> "analyzer" : {  
> "default" : {  
> "type" : "standard",  
> "stopwords" : "none"  
> }  
> }  
> }  
> },  
> "mappings" : {  
> "default" : {  
> "\_all" : {"enabled" : true},  
> "dynamic\_templates" : [ {  
> "string\_fields" : {  
> "match" : "_",  
> "match\_mapping\_type" : "string",  
> "mapping" : {  
> "type" : "multi\_field",  
> "fields" : {  
> "{name}" : {"type": "string", "index" : "analyzed",  
> "omit\_norms" : true },  
> "raw" : {"type": "string", "index" : "not\_analyzed",  
> "ignore\_above" : 256}  
> }  
> }  
> }  
> } ],  
> "properties" : {  
> "@version": { "type": "string", "index": "not\_analyzed" },  
> "ipver":{"type":"long"},  
> "protocol":{"type":"long"},  
> "size":{"type":"long"},  
> "sp":{"type":"long"},  
> "stored":{"type":"boolean"},  
> "@timestamp":{"type":"date", "format":"dateOptionalTime"},  
> "dp":{"type":"long"},  
> "rcvd":{"type":"long"},  
> "sent":{"type":"long"},  
> "sid":{"type":"long"},  
> "policy\_id":{"type":"long"},  
> "size":{"type":"long"},  
> "ids\_priority":{"type":"long"},  
> "duration":{"type":"long"},  
> "src\_port":{"type":"long"},  
> "src\_xlated\_port":{type: "long"},  
> "dst\_port":{"type":"long"},  
> "dst\_xlated\_port":{type: "long"},  
> "TTL":{"type":"long"},  
> "geoip" : {  
> "type" : "object",  
> "dynamic": true,  
> "path": "full",  
> "properties" : {  
> "location" : { "type" : "geo\_point" }  
> }  
> }  
> }  
> }  
> }  
> }
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/7d0e5d29-4747-4dfa-9b79-9469e4814d91%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/7d0e5d29-4747-4dfa-9b79-9469e4814d91%40googlegroups.com)  
> .
> 
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQCT-n3ELV2WCC6Y4zZmqbETxsnn-6RB\_abcjp8CP5FEEw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQCT-n3ELV2WCC6Y4zZmqbETxsnn-6RB_abcjp8CP5FEEw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Stefan\_Sabolowitsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefan_sabolowitsch/32/48680_2.png) [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\
**Post date:** [February 11, 2014, 9:50pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/5 "2014-02-11T21:50:21Z")

</div>

Ah OK,

i get this with "curl -XGET '[http://localhost:9200/\_all/\_mapping](http://localhost:9200/_all/_mapping)'"

{"kibana-int":{"temp":{"properties":{"dashboard":{"type":"string"},"group":{  
"type":"string"},"title":{"type":"string"},"user":{"type":"string"}}},  
"dashboard":{"properties":{"dashboard":{"type":"string"},"group":{"type":  
"string"},"title":{"type":"string"},"user":{"type":"string"}}}},  
"logstash-2014.02.11":{"_default_":{"dynamic\_templates":[{"string\_fields":{  
"mapping":{"type":"multi\_field","fields":{"raw":{"index":"not\_analyzed",  
"ignore\_above":256,"type":"string"},"{name}":{"index":"analyzed",  
"omit\_norms":true,"type":"string"}}},"match":"_","match\_mapping\_type":  
"string"}}],"properties":{"@timestamp":{"type":"date","format":  
"dateOptionalTime"},"@version":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs"},"TTL":{"type":"long"},"dp"  
:{"type":"long"},"dst\_port":{"type":"long"},"dst\_xlated\_port":{"type":"long"  
},"duration":{"type":"long"},"geoip":{"dynamic":"true","properties":{  
"location":{"type":"geo\_point"}}},"ids\_priority":{"type":"long"},"ipver":{  
"type":"long"},"policy\_id":{"type":"long"},"protocol":{"type":"long"},"rcvd"  
:{"type":"long"},"sent":{"type":"long"},"sid":{"type":"long"},"size":{"type"  
:"long"},"sp":{"type":"long"},"src\_port":{"type":"long"},"src\_xlated\_port":{  
"type":"long"},"stored":{"type":"boolean"}}},"suricata":{"dynamic\_templates"  
:[{"string\_fields":{"mapping":{"type":"multi\_field","fields":{"raw":{"index"  
:"not\_analyzed","ignore\_above":256,"type":"string"},"{name}":{"index":  
"analyzed","omit\_norms":true,"type":"string"}}},"match":"_",  
"match\_mapping\_type":"string"}}],"properties":{"@timestamp":{"type":"date",  
"format":"dateOptionalTime"},"@version":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs"},"TTL":{  
"type":"long"},"alert":{"properties":{"action":{"type":"multi\_field",  
"fields":{"action":{"type":"string","norms":{"enabled":false}},"raw":{"type"  
:"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"category":{"type":  
"multi\_field","fields":{"category":{"type":"string","norms":{"enabled":false  
}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},"gid":{  
"type":"long"},"rev":{"type":"long"},"severity":{"type":"long"},"signature"  
:{"type":"multi\_field","fields":{"signature":{"type":"string","norms":{  
"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"signature\_id":{"type":"long"}}},"dns":{"properties":{  
"id":{"type":"long"},"rdata":{"type":"multi\_field","fields":{"rdata":{"type"  
:"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"rrname":{"type":"multi\_field",  
"fields":{"rrname":{"type":"string","norms":{"enabled":false}},"raw":{"type"  
:"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"rrtype":{"type":  
"multi\_field","fields":{"rrtype":{"type":"string","norms":{"enabled":false  
}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},"ttl":{  
"type":"long"},"type":{"type":"multi\_field","fields":{"type":{"type":  
"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}}}},"dp":{"type":"long"},"dst\_ip"  
:{"type":"multi\_field","fields":{"dst\_ip":{"type":"string","norms":{  
"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"dst\_port":{"type":"long"},"dst\_xlated\_port":{"type":  
"long"},"duration":{"type":"long"},"event\_type":{"type":"multi\_field",  
"fields":{"event\_type":{"type":"string","norms":{"enabled":false}},"raw":{  
"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},"file":{  
"type":"multi\_field","fields":{"file":{"type":"string","norms":{"enabled":  
false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"geoip":{"dynamic":"true","properties":{"area\_code":{"type":"long"},  
"city\_name":{"type":"multi\_field","fields":{"city\_name":{"type":"string",  
"norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"continent\_code":{"type":"multi\_field","fields":{  
"continent\_code":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"country\_code2":{"type":  
"multi\_field","fields":{"country\_code2":{"type":"string","norms":{"enabled":  
false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"country\_code3":{"type":"multi\_field","fields":{"country\_code3":{"type":  
"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"country\_name":{"type":  
"multi\_field","fields":{"country\_name":{"type":"string","norms":{"enabled":  
false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"dma\_code":{"type":"long"},"ip":{"type":"multi\_field","fields":{"ip":{"type"  
:"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"latitude":{"type":"double"},  
"location":{"type":"geo\_point"},"longitude":{"type":"double"},"postal\_code"  
:{"type":"multi\_field","fields":{"postal\_code":{"type":"string","norms":{  
"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"real\_region\_name":{"type":"multi\_field","fields":{  
"real\_region\_name":{"type":"string","norms":{"enabled":false}},"raw":{"type"  
:"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"region\_name":{"type":  
"multi\_field","fields":{"region\_name":{"type":"string","norms":{"enabled":  
false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"timezone":{"type":"multi\_field","fields":{"timezone":{"type":"string",  
"norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}}}},"host":{"type":"multi\_field","fields":{"host":{  
"type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"http":{"properties":{  
"hostname":{"type":"multi\_field","fields":{"hostname":{"type":"string",  
"norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"http\_content\_type":{"type":"multi\_field","fields":{  
"http\_content\_type":{"type":"string","norms":{"enabled":false}},"raw":{  
"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"http\_method":{"type":"multi\_field","fields":{"http\_method":{"type":"string"  
,"norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"http\_refer":{"type":"multi\_field","fields":{  
"http\_refer":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"http\_user\_agent":{  
"type":"multi\_field","fields":{"http\_user\_agent":{"type":"string","norms":{  
"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"length":{"type":"long"},"protocol":{"type":  
"multi\_field","fields":{"protocol":{"type":"string","norms":{"enabled":false  
}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"redirect":{"type":"multi\_field","fields":{"redirect":{"type":"string",  
"norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"status":{"type":"multi\_field","fields":{"status":{  
"type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"url":{"type":"multi\_field",  
"fields":{"url":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"xff":{"type":  
"multi\_field","fields":{"xff":{"type":"string","norms":{"enabled":false}},  
"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}}}},  
"ids\_priority":{"type":"long"},"ipver":{"type":"long"},"message":{"type":  
"multi\_field","fields":{"message":{"type":"string","norms":{"enabled":false  
}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"policy\_id":{"type":"long"},"proto":{"type":"multi\_field","fields":{"proto"  
:{"type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"protocol":{"type":"long"},  
"rcvd":{"type":"long"},"received\_at":{"type":"multi\_field","fields":{  
"received\_at":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
"docs","include\_in\_all":false,"ignore\_above":256}}},"sent":{"type":"long"},  
"sid":{"type":"long"},"size":{"type":"long"},"sp":{"type":"long"},"src\_ip":{  
"type":"multi\_field","fields":{"src\_ip":{"type":"string","norms":{"enabled":  
false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"src\_port":{"type":"long"},"src\_xlated\_port":{"type":"long"},"stored":{  
"type":"boolean"},"tags":{"type":"multi\_field","fields":{"tags":{"type":  
"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"tls":{"properties":{  
"fingerprint":{"type":"multi\_field","fields":{"fingerprint":{"type":"string"  
,"norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
"norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}},"issuerdn":{"type":"multi\_field","fields":{"issuerdn"  
:{"type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}},"subject":{"type":"multi\_field"  
,"fields":{"subject":{"type":"string","norms":{"enabled":false}},"raw":{  
"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
"version":{"type":"multi\_field","fields":{"version":{"type":"string","norms"  
:{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
"enabled":false},"index\_options":"docs","include\_in\_all":false,  
"ignore\_above":256}}}}},"type":{"type":"multi\_field","fields":{"type":{  
"type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
"include\_in\_all":false,"ignore\_above":256}}}}}}}

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/30daa8bd-3eb8-436e-8c75-9bff454cb7a5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/30daa8bd-3eb8-436e-8c75-9bff454cb7a5%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Ivan](https://avatars.discourse-cdn.com/v4/letter/i/df788c/32.png) [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Post date:** [February 11, 2014, 11:36pm UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/6 "2014-02-11T23:36:58Z")

</div>

The actual mapping demonstrates the inconsistencies. Did the index already  
contain documents when the mapping was applied.

You can use retrieve the mapping on a single field if desired

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

In your case:  
[http://localhost:9200/logstash-2014.02.11/suricata/\_mapping/field/file](http://localhost:9200/logstash-2014.02.11/suricata/_mapping/field/file)

From your mapping:  
{  
"logstash-2014.02.11": {  
....  
"suricata": {  
"properties": {  
...  
"file": {  
"type": "multi\_field",  
"fields": {  
"file": {  
"type": "string",  
"norms": {  
"enabled": false  
}  
},  
"raw": {  
"type": "string",  
"index": "not\_analyzed",  
"norms": {  
"enabled": false  
},  
"index\_options": "docs",  
"include\_in\_all": false,  
"ignore\_above": 256  
}  
}  
...

The file field is identified as a text multi-field. Your indexed document  
however looks like:

{  
...  
"file": {  
"filename": "/SpamResolverNG/SpamResolverNG.dll",  
"magic": "data",  
"state": "CLOSED",  
"stored": false,  
"size": 115  
},  
...  
}

Here file is an inner object. Either some document was indexed earlier with  
a text "file" field or there is something wrong with the mapping. The  
dynamic templates should not apply since the match\_mapping\_type, but  
perhaps there is an error somewhere (your mapping or the code). You should  
create a reproducible error as described here:

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

--  
Ivan

On Tue, Feb 11, 2014 at 1:50 PM, Stefan Sabolowitsch \<  
[sabolowitschst@in-trier.de](mailto:sabolowitschst@in-trier.de)\> wrote:

> Ah OK,
> 
> i get this with "curl -XGET '[http://localhost:9200/\_all/\_mapping](http://localhost:9200/_all/_mapping)'"
> 
> {"kibana-int":{"temp":{"properties":{"dashboard":{"type":"string"},"group"  
> :{"type":"string"},"title":{"type":"string"},"user":{"type":"string"}}},  
> "dashboard":{"properties":{"dashboard":{"type":"string"},"group":{"type":  
> "string"},"title":{"type":"string"},"user":{"type":"string"}}}},  
> "logstash-2014.02.11":{"_default_":{"dynamic\_templates":[{"string\_fields"  
> :{"mapping":{"type":"multi\_field","fields":{"raw":{"index":"not\_analyzed",  
> "ignore\_above":256,"type":"string"},"{name}":{"index":"analyzed",  
> "omit\_norms":true,"type":"string"}}},"match":"_","match\_mapping\_type":  
> "string"}}],"properties":{"@timestamp":{"type":"date","format":  
> "dateOptionalTime"},"@version":{"type":"string","index":"not\_analyzed",  
> "norms":{"enabled":false},"index\_options":"docs"},"TTL":{"type":"long"},  
> "dp":{"type":"long"},"dst\_port":{"type":"long"},"dst\_xlated\_port":{"type":  
> "long"},"duration":{"type":"long"},"geoip":{"dynamic":"true","properties"  
> :{"location":{"type":"geo\_point"}}},"ids\_priority":{"type":"long"},"ipver"  
> :{"type":"long"},"policy\_id":{"type":"long"},"protocol":{"type":"long"},  
> "rcvd":{"type":"long"},"sent":{"type":"long"},"sid":{"type":"long"},"size"  
> :{"type":"long"},"sp":{"type":"long"},"src\_port":{"type":"long"},  
> "src\_xlated\_port":{"type":"long"},"stored":{"type":"boolean"}}},"suricata"  
> :{"dynamic\_templates":[{"string\_fields":{"mapping":{"type":"multi\_field",  
> "fields":{"raw":{"index":"not\_analyzed","ignore\_above":256,"type":"string"  
> },"{name}":{"index":"analyzed","omit\_norms":true,"type":"string"}}},  
> "match":"_","match\_mapping\_type":"string"}}],"properties":{"@timestamp":{  
> "type":"date","format":"dateOptionalTime"},"@version":{"type":"string",  
> "index":"not\_analyzed","norms":{"enabled":false},"index\_options":"docs"},  
> "TTL":{"type":"long"},"alert":{"properties":{"action":{"type":  
> "multi\_field","fields":{"action":{"type":"string","norms":{"enabled":false  
> }},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false  
> },"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
> "category":{"type":"multi\_field","fields":{"category":{"type":"string",  
> "norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
> "norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"gid":{"type":"long"},"rev":{"type":"long"},  
> "severity":{"type":"long"},"signature":{"type":"multi\_field","fields":{  
> "signature":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"signature\_id":{"type"  
> :"long"}}},"dns":{"properties":{"id":{"type":"long"},"rdata":{"type":  
> "multi\_field","fields":{"rdata":{"type":"string","norms":{"enabled":false  
> }},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false  
> },"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
> "rrname":{"type":"multi\_field","fields":{"rrname":{"type":"string","norms"  
> :{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms"  
> :{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"rrtype":{"type":"multi\_field","fields":{"rrtype":{  
> "type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"ttl":{"type":"long"},"type"  
> :{"type":"multi\_field","fields":{"type":{"type":"string","norms":{  
> "enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
> "enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}}}},"dp":{"type":"long"},"dst\_ip":{"type":  
> "multi\_field","fields":{"dst\_ip":{"type":"string","norms":{"enabled":false  
> }},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false  
> },"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
> "dst\_port":{"type":"long"},"dst\_xlated\_port":{"type":"long"},"duration":{  
> "type":"long"},"event\_type":{"type":"multi\_field","fields":{"event\_type":{  
> "type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"file":{"type":"multi\_field",  
> "fields":{"file":{"type":"string","norms":{"enabled":false}},"raw":{"type"  
> :"string","index":"not\_analyzed","norms":{"enabled":false},"index\_options"  
> :"docs","include\_in\_all":false,"ignore\_above":256}}},"geoip":{"dynamic":  
> "true","properties":{"area\_code":{"type":"long"},"city\_name":{"type":  
> "multi\_field","fields":{"city\_name":{"type":"string","norms":{"enabled":  
> false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
> false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256  
> }}},"continent\_code":{"type":"multi\_field","fields":{"continent\_code":{  
> "type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"country\_code2":{"type":  
> "multi\_field","fields":{"country\_code2":{"type":"string","norms":{  
> "enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
> "enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"country\_code3":{"type":"multi\_field","fields":{  
> "country\_code3":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"country\_name":{"type"  
> :"multi\_field","fields":{"country\_name":{"type":"string","norms":{  
> "enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
> "enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"dma\_code":{"type":"long"},"ip":{"type":  
> "multi\_field","fields":{"ip":{"type":"string","norms":{"enabled":false}},  
> "raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false},  
> "index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
> "latitude":{"type":"double"},"location":{"type":"geo\_point"},"longitude":{  
> "type":"double"},"postal\_code":{"type":"multi\_field","fields":{  
> "postal\_code":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"real\_region\_name":{  
> "type":"multi\_field","fields":{"real\_region\_name":{"type":"string","norms"  
> :{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms"  
> :{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"region\_name":{"type":"multi\_field","fields":{  
> "region\_name":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"timezone":{"type":  
> "multi\_field","fields":{"timezone":{"type":"string","norms":{"enabled":  
> false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
> false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256  
> }}}}},"host":{"type":"multi\_field","fields":{"host":{"type":"string",  
> "norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
> "norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"http":{"properties":{"hostname":{"type":  
> "multi\_field","fields":{"hostname":{"type":"string","norms":{"enabled":  
> false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
> false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256  
> }}},"http\_content\_type":{"type":"multi\_field","fields":{  
> "http\_content\_type":{"type":"string","norms":{"enabled":false}},"raw":{  
> "type":"string","index":"not\_analyzed","norms":{"enabled":false},  
> "index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
> "http\_method":{"type":"multi\_field","fields":{"http\_method":{"type":  
> "string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"http\_refer":{"type":  
> "multi\_field","fields":{"http\_refer":{"type":"string","norms":{"enabled":  
> false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
> false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256  
> }}},"http\_user\_agent":{"type":"multi\_field","fields":{"http\_user\_agent":{  
> "type":"string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"length":{"type":"long"},  
> "protocol":{"type":"multi\_field","fields":{"protocol":{"type":"string",  
> "norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
> "norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"redirect":{"type":"multi\_field","fields":{  
> "redirect":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"status":{"type":  
> "multi\_field","fields":{"status":{"type":"string","norms":{"enabled":false  
> }},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false  
> },"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}},  
> "url":{"type":"multi\_field","fields":{"url":{"type":"string","norms":{  
> "enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
> "enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"xff":{"type":"multi\_field","fields":{"xff":{"type":  
> "string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}}}},"ids\_priority":{"type":  
> "long"},"ipver":{"type":"long"},"message":{"type":"multi\_field","fields":{  
> "message":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"policy\_id":{"type":  
> "long"},"proto":{"type":"multi\_field","fields":{"proto":{"type":"string",  
> "norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
> "norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"protocol":{"type":"long"},"rcvd":{"type":"long"},  
> "received\_at":{"type":"multi\_field","fields":{"received\_at":{"type":  
> "string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"sent":{"type":"long"},"sid"  
> :{"type":"long"},"size":{"type":"long"},"sp":{"type":"long"},"src\_ip":{  
> "type":"multi\_field","fields":{"src\_ip":{"type":"string","norms":{  
> "enabled":false}},"raw":{"type":"string","index":"not\_analyzed","norms":{  
> "enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"src\_port":{"type":"long"},"src\_xlated\_port":{"type"  
> :"long"},"stored":{"type":"boolean"},"tags":{"type":"multi\_field","fields"  
> :{"tags":{"type":"string","norms":{"enabled":false}},"raw":{"type":  
> "string","index":"not\_analyzed","norms":{"enabled":false},"index\_options":  
> "docs","include\_in\_all":false,"ignore\_above":256}}},"tls":{"properties":{  
> "fingerprint":{"type":"multi\_field","fields":{"fingerprint":{"type":  
> "string","norms":{"enabled":false}},"raw":{"type":"string","index":  
> "not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}},"issuerdn":{"type":  
> "multi\_field","fields":{"issuerdn":{"type":"string","norms":{"enabled":  
> false}},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":  
> false},"index\_options":"docs","include\_in\_all":false,"ignore\_above":256  
> }}},"subject":{"type":"multi\_field","fields":{"subject":{"type":"string",  
> "norms":{"enabled":false}},"raw":{"type":"string","index":"not\_analyzed",  
> "norms":{"enabled":false},"index\_options":"docs","include\_in\_all":false,  
> "ignore\_above":256}}},"version":{"type":"multi\_field","fields":{"version"  
> :{"type":"string","norms":{"enabled":false}},"raw":{"type":"string",  
> "index":"not\_analyzed","norms":{"enabled":false},"index\_options":"docs",  
> "include\_in\_all":false,"ignore\_above":256}}}}},"type":{"type":  
> "multi\_field","fields":{"type":{"type":"string","norms":{"enabled":false  
> }},"raw":{"type":"string","index":"not\_analyzed","norms":{"enabled":false  
> },"index\_options":"docs","include\_in\_all":false,"ignore\_above":256}}}}}}}
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/30daa8bd-3eb8-436e-8c75-9bff454cb7a5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/30daa8bd-3eb8-436e-8c75-9bff454cb7a5%40googlegroups.com)  
> .  
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQBE4%3DxsPLD6b7NBgbo%3D4L9t1Fx0qRZ7Hn4sUkHXQOeD6A%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQBE4%3DxsPLD6b7NBgbo%3D4L9t1Fx0qRZ7Hn4sUkHXQOeD6A%40mail.gmail.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Stefan\_Sabolowitsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefan_sabolowitsch/32/48680_2.png) [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\
**Post date:** [February 12, 2014, 8:42am UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/7 "2014-02-12T08:42:26Z")

</div>

Ivan,  
thank you for your help and good explanations.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/1d752362-0fc9-4bdd-81a7-624ed35428c7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/1d752362-0fc9-4bdd-81a7-624ed35428c7%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:50am UTC](https://discuss.elastic.co/t/get-mapperparsingexception-failed-to-parse-in-0-90-10/15732/8 "2017-07-06T01:50:48Z")

</div>