HI
i am using 6.2 and i made changes to my template file as required but i am getting below error in logstash.
Blockquote
indent preformatted text by 4 spaces
[2018-03-13T06:55:55,748][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"foltsdb-2018.03.13", :_type=>"doc", :_routing=>nil}, #LogStash::Event:0x199f431e], :response=>{"index"=>{"_index"=>"foltsdb-2018.03.13", "_type"=>"doc", "_id"=>"KdWlH2IB9vIHqwZ6YyrH", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"Could not convert [message.index] to boolean", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"Failed to parse value [not_analyzed] as only [true] or [false] are allowed."}}}}}}
indent preformatted text by 4 spaces
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.