Kibana server not ready after update (cause of mapper_parsing_exception)

[sotor_nien]

Hi all,

I'm quite new to ELK, did my first Update and instant run into the first issue I cannot address.

What I did:

• Updated all Elasticsearch Nodes from 6.5 to 6.8
• Cluster is green
• Updated Kibana from 6.5 to 6.8

Current State:

• Kibana HTTP Error: Kibana server is not ready yet
• Kibana Startup Logs:

Aug 14 07:35:52 kibana-server kibana[32209]: {"type":"log","@timestamp":"2019-08-14T07:35:52Z","tags":["info","migrations"],"pid":32209,"message":"Creating index .kibana_3."}

Aug 14 07:35:52 kibana-server kibana[32209]: {"type":"log","@timestamp":"2019-08-14T07:35:52Z","tags":["debug","upgrade_assistant","reindex_worker"],"pid":32209,"message":"Could not fetch riendex operations from Elasticsearch"}

Aug 14 07:35:52 kibana-server kibana[32209]: {"type":"log","@timestamp":"2019-08-14T07:35:52Z","tags":["debug","upgrade_assistant","reindex_worker"],"pid":32209,"message":"Stopping worker..."}
Aug 14 07:35:52 kibana-server kibana[32209]: FATAL [mapper_parsing_exception] Mapping definition for [url] has unsupported parameters: [properties : {accessCount={type=long}, accessDate={type=date}, url={type=text, fields={keyword={ignore_above=2048, type=keyword}}}, createDate={type=date}}]"}},"status":400}"}

At this Point I'm stuck:
It seems there is a problem with the .kibana_N Index

• This is working: curl -XPUT http://localhost:9200/test-index
• This fails with the same error (mapper_parsing_error): curl -XPUT http://localhost:9200/.kibana-testtryXYZ

Therefore I conclude that there must be an issue with the .kibana template which applies to all indicies containing the name kibana.

The big question is:
What is wrong with the [url] mapping definition and how to repair it?

Thanks to everyone who takes the time for my issue

[jbudz (Jon Budzenski)]

It's possible there's a conflict between the old kibana template and the new upgrade system. In 6.6+ there's an upgrade step that will push mappings (as opposed to using a template). You should be able to safely delete any kibana templates, and then let's try a server restart

Can you share which .kibana indices exist? It's probably worth checking if there's any partial upgrades in place too

[sotor_nien]

Hi jbudz and thanks for your and sorry for my late reply. I deleted all templates and started the Service but the Error remains.

About the indices:
There is .kibana_1 and .kibana_2. The Alias is mapped to .kibana_2. It stills loggs Mapping definition for [url] has unsupported parameters for .kibana_3 when starting the Kibana Service.

/usr/share/kibana/bin/kibana --version tells me 6.8.2. This is not conform with the upgraded version from my indices Screenshot above. Is this normal?