Ingest Attachment is not working [err: InvalidIndexNameException]

org.elasticsearch.indices.InvalidIndexNameException: [_ingest] Invalid index name [_ingest], must not start with '_'
    at org.elasticsearch.cluster.metadata.MetaDataCreateIndexService.validateIndexName(
    at org.elasticsearch.cluster.metadata.MetaDataCreateIndexService.validate(
    at org.elasticsearch.cluster.metadata.MetaDataCreateIndexService.access$100(
    at org.elasticsearch.cluster.metadata.MetaDataCreateIndexService$2.execute(
    at org.elasticsearch.cluster.service.InternalClusterService$
    at org.elasticsearch.common.util.concurrent.PrioritizedEsThreadPoolExecutor$
    at java.util.concurrent.ThreadPoolExecutor.runWorker(
    at java.util.concurrent.ThreadPoolExecutor$

Above is the error that I got in the log.

I'm using Debian and Installed elastic search through
sudo apt-get update && sudo apt-get install elasticsearch

And I installed the plugin ingest-attachment through
sudo bin/plugin -i ingest-attachment -u

The plugin is successfuly installed but it is showing error when I try to ingest attachment like this in python

import requests
import json

payload = json.dumps({
    'description': 'Process documents',
    'processors': [
            'attachment': {
                'field': 'thedata',
                'indexed_chars': -1
            'set': {
                'field': 'attachment.title',
                'value': '{{ title }}'
            'set': {
                'field': '',
                'value': '{{ page }}'

print payload

r = requests.put('http://localhost:9200/_ingest/pipeline/attachment', data=payload)

print r.text

All these are actually working fine in my local macOS setup. But in the server (Debian OS) it's showing the error that I mentioned above.


Can you check what is coming back on the remote server when you run a simple GET / please?

I can successfully run and get the result for the simple /GET query :slight_smile:

  "status" : 200,
  "name" : "Varnae",
  "version" : {
    "number" : "1.0.3",
   "build_hash" : "NA",
   "build_timestamp" : "NA",
   "build_snapshot" : false,
   "lucene_version" : "4.6"
  "tagline" : "You Know, for Search"

So you have elasticsearch 1.0.3 running.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.