Mapper_parsing_exception", "reason"=>"object mapping for [host] tried to parse field [host] as object, but found a concrete value"}}}}

[stephenb (Stephen Brown)]

Hi @ranjini It looks like you are connecting to OpenSearch not Elasticsearch so you should really go to their forums, you will not get much help here.

Also your logsstash is wrong you can see "host"=>"[host][name]", this in the error

replace is not correct you want to use rename

    mutate {
        rename => {"shortHostname" => "hostname"}
    }

And if you want to understand the error you can take a look at this

Logstash Parser error - tried to parse field as object, but found a concrete value

Try this test, hopefully this makes it clearer POST test/_doc { "myfield" : "myvalue", "myotherfield" : { "mysubfield1" : "mysubvalue1", "mysubfield2" : "mysubvalue2" } } Then Post POST test/_doc { "myfield" : "myvalue", "myotherfield" : "myconcretevalue" } and you will get this error. { "error" : { "root_cause" : [ { "type" : "mapper_parsing_exception", "reason" : "object mapping for [myotherfield] tried to parse field [myotherfield] as objec…