# How to find Mapping conflict?

**URL:** https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497
**Category:** Elasticsearch
**Created:** [October 12, 2021, 1:15pm UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497 "2021-10-12T13:15:05Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [October 12, 2021, 1:15pm UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/1 "2021-10-12T13:15:05Z")

</div>

We upgraded cluster from 7.12 to 7.15

new index created metricbeat-7.15.0 but now in index pattern it says I have mapping conflict

in older version there was a field type=conflict but no longer. how do I find which field are having conflict?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/8/785e93297f69d1c088c60c7c3a2d315c03082dfb.png)

---

<div class="post-metadata">

### Author: ![linkerc](https://avatars.discourse-cdn.com/v4/letter/l/13edae/32.png) [@linkerc](https://discuss.elastic.co/u/linkerc)
#### Post date: [October 12, 2021, 10:31pm UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/2 "2021-10-12T22:31:51Z")

</div>

The writer's return status should tell you. That write will fail (even for bulk write).

---

<div class="post-metadata">

### Author: ![zx8086](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zx8086/32/94917_2.png) [@zx8086](https://discuss.elastic.co/u/zx8086)
#### Post date: [October 12, 2021, 10:41pm UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/3 "2021-10-12T22:41:09Z")

</div>

> [@elasticforme](#):
>
> We upgraded cluster from 7.12 to 7.15
> 
> new index created metricbeat-7.15.0

Have you setup / loaded the new templates from metricbeat and upgraded all your beats to that same version?

You can also identify which beats agents are not running 7.15 by using Discover to filter Beats versions.

```auto
  sudo metricbeat setup -e --strict.perms=false \
  -E output.logstash.enabled=false \
  -E output.elasticsearch.hosts=['x.x.x.x:9200'] \
  -E output.elasticsearch.username=redacted \
  -E output.elasticsearch.password=redacted \
  -E setup.kibana.host=x.x.x.x:5601

```

---

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [October 13, 2021, 12:31am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/4 "2021-10-13T00:31:15Z")

</div>

No I have not updated all the agent.,

Agent will get updated slowly. only cluster got updated. I created new template metricbeat-7.15.0. all this is done via metricbeat config file.

due to many different agent it will get pushed out by puppet and eventually it should be all 7.15,  
but in theory this should work without any problem as old index template and new index template is done via default fields.yml file

after upgrading ELK cluster to 7.15 , I checked everything was working fine.

then I change one system's metricbeat to 7.15 and created all required thing using following config

```auto
output.elasticsearch.index: "metricbeat-*"
setup.template.name: "metricbeat"
setup.template.pattern: "metricebat-*"
setup.template.fields: "/etc/metricbeat/fields.yml"
setup.ilm.overwrite: false
setup.ilm.enabled: auto
setup.ilm.policy_name: "metricbeat"
setup.ilm.rollover_alias: "metricbeat-%{[agent.version]}"
setup.ilm.pattern: "{now/d}-000001"

```

It did created new template metricbeat-7.15.0 and so on. new data also came in from new updated host. but only problem is that is complains it has mapping conflit. where is it?

---

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [October 13, 2021, 12:47am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/5 "2021-10-13T00:47:01Z")

</div>

Ok as test I remove all the records from metricbeat-7.15.0 as it has only one record from that one system.  
index pattern still shows there is mapping conflict.

I found that on discover there is filter by type and has option called "conflict" even that displays nothing. even for huge time range that I selected.

---

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [October 13, 2021, 12:54am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/6 "2021-10-13T00:54:17Z")

</div>

alright fixed found it, putting it here incase someone is looking for this in feature.

on discover you select "filter by type= conflit" and then uncheck hide missing field

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/c/ac5f42d05f9f59efd577f071a8da9f23b2c2321f.png)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 10, 2021, 12:55am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497/7 "2021-11-10T00:55:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
