Logstash error trying to index filebeat


Logstash log files are being filled up with indexing errors for filebeat:

[2020-11-12T09:06:02,844][WARN ][logstash.outputs.elasticsearch][main][28a01e4629fbbc3006822900269029f08bd4f371d6be029377ac4944518e3137] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"filebeat-2020.11.12", :routing=>nil, :_type=>"_doc"}, #<LogStash::Event:0x19dc9f8>], :response=>{"index"=>{"_index"=>"filebeat-2020.11.12", "_type"=>"_doc", "_id"=>nil, "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"only write ops with an op_type of create are allowed in data streams"}}}}

Any thoughts as to what is causing this? I can't see that it is related to setting up TLS/HTTPS connections for Kibana/Elastic/Logstash

Got it sorted after removing all of the xpack options in the YML file

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.