Mapper_parsing_exception & illegal_argument_exception

Elastic Stack Logstash
1

Hello World!

I've noticed following WARN message in my logstash's output:

logstash | [2019-01-29T04:39:23,166][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"logstash-2019.01.29", :_type=>"doc", :routing=>nil}, #<LogStash::Event:0xef159cc>], :response=>{"index"=>{"_index"=>"logstash-2019.01.29", "_type"=>"doc", "_id"=>"Xbznl2gBT6G9g9fPlGz1", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse field [level] of type [long]", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"For input string: \"error\""}}}}}

per GET /logstash-2019.01.29/_mapping :

      "level" : {
        "type" : "long"
      },

Some of my docs have key "level" with value from 1 through 6, it is really should've been byte instead of long however logstash detected as long.

either way, how does one resolves this warning message?

Please advise.

2

The way I read that error message you are trying to put "error" into a field that is a long. I would not expect that to work.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.