# Illegal\_argument\_exception at index filebeat-7.4.0

**URL:** <https://discuss.elastic.co/t/illegal-argument-exception-at-index-filebeat-7-4-0/252513>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 19, 2020, 8:59am UTC](https://discuss.elastic.co/t/illegal-argument-exception-at-index-filebeat-7-4-0/252513 "2020-10-19T08:59:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![deniss.stepanov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deniss.stepanov/32/77419_2.png) [@deniss.stepanov](https://discuss.elastic.co/u/deniss.stepanov)\
**Post date:** [October 19, 2020, 8:59am UTC](https://discuss.elastic.co/t/illegal-argument-exception-at-index-filebeat-7-4-0/252513/1 "2020-10-19T08:59:53Z")

</div>

Hello everyone,

After the last update to version 7.9.1 my ELK cluster and beats version in Kibana under Visuals tab, I start to receive such notifications. Easy google is nothing gave to me, so I am here.

And this is an error that we have. And this is become, only when we what to visualize something. So the problem mainly in the index.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/7/5783b4df1ea7a648528bd7416d5bc6f0766d2724.png)

The clipboard copy also here

```auto
    {
      "took": 1871,
      "timed_out": false,
      "_shards": {
        "total": 22,
        "successful": 21,
        "skipped": 17,
        "failed": 1,
        "failures": [
          {
            "shard": 0,
            "index": "filebeat-7.4.0",
            "node": "0tI6xkQBTduwZttoQe_yhw",
            "reason": {
              "type": "illegal_argument_exception",
              "reason": "Text fields are not optimised for operations that require per-document field data like aggregations and sorting, so these operations are disabled by default. Please use a keyword field instead. Alternatively, set fielddata=true on [host.hostname] in order to load field data by uninverting the inverted index. Note that this can use significant memory."
            }
          }
        ]
      },
      "hits": {
        "total": 699812,
        "max_score": null,
        "hits": []
      },
      "aggregations": {
        "2": {
          "doc_count_error_upper_bound": 0,
          "sum_other_doc_count": 0,
          "buckets": [
            {
              "key": "xxx1",
              "doc_count": 252556
            },
            {
              "key": "elastic-node3",
              "doc_count": 193383
            },
            {
              "key": "xxx2",
              "doc_count": 94929
            },
            {
              "key": "xxx3",
              "doc_count": 67915
            },
            {
              "key": "elastic-node1.etk.ee",
              "doc_count": 54645
            },
            {
              "key": "elastic-node2.etk.ee",
              "doc_count": 25827
            },
            {
              "key": "xxx4",
              "doc_count": 7998
            },
            {
              "key": "xxx5",
              "doc_count": 568
            },
            {
              "key": "xxx6",
              "doc_count": 522
            },
            {
              "key": "xxx7",
              "doc_count": 419
            },
            {
              "key": "xxx8",
              "doc_count": 395
            },
            {
              "key": "xxx9",
              "doc_count": 258
            },
            {
              "key": "xxx10",
              "doc_count": 222
            },
            {
              "key": "xxx11",
              "doc_count": 175
            }
          ]
        }
      }
    }

```

So, guys... Please help me!

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [October 19, 2020, 9:10am UTC](https://discuss.elastic.co/t/illegal-argument-exception-at-index-filebeat-7-4-0/252513/2 "2020-10-19T09:10:42Z")

</div>

Welcome!

I'm moving the question to #elastic-stack:beats as it's more likely related to this project.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 16, 2020, 9:10am UTC](https://discuss.elastic.co/t/illegal-argument-exception-at-index-filebeat-7-4-0/252513/3 "2020-11-16T09:10:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.