Hey!
I am quite new to the ELK-Stack but what I have seen so far is awesome even
if it's sometimes challenging for me! 
But I am facing a huge problem right now. The loglines often contain
xml/soap messages and i want to filter them using the xml filter.
When doing so I sometimes get the following errormessage
"org.elasticsearch.index.mapper.MapperParsingException: object mapping
[someId] tr ying to serialize a value with no field associated with it,
current value [ABC-A3C-XYZ].
Another example (the errormessage from the es log):
[2014-12-04 15:07:00,312][DEBUG][action.bulk ] [Sludge] [
logstash-2014.12.04][0] failed to execute bulk item (index) index {[logstash
-2014.12.04][tomcat][Rg37kc1TQ8OD4jvhQwX0PQ], source[{"message":"01.12.2014
11:10:03.117 [INFO ] [.60-6180-exec-3] [abc/stgService] [x.y.z.stgService]
- Inbound Message ---------------------------- ID: 845 Address:
http://localhost:1234/test/testservice Encoding: ISO-8859-1 Http-Method:
POST Content-Type: text/xml Headers: {connection=[close],
Content-Length=[477], content-type=[text/xml]} Payload: <?xml
version="1.0" encoding="ISO-8859-1"?> <soapenv:Envelope
xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:ser="http://service.sc.test.testcompany.com/">soapenv:Bodyser:erzeugeServicenameAUK-CZX-U6Q1
890000NGN-6067</ser:erzeugeServicename></soapenv:Body></soapenv:Envelope>
-------------------------------------- ","@version":"1","@timestamp":
"2014-12-04T14:06:59.341Z","type":"tomcat","host":"FERI-PC-7-64","path":
"C:\logstash-1.4.2\bin\hibernate.log","tags":["multiline","gsubed",
"gsubed","Inbound Message"],"timestamp":"01.12.2014 11:10:03.117","loglevel"
:"[INFO ]","thread":"[.60-6180-exec-3]","service":"[abc/stgService]",
"javaclass":"[x.y.z.stgService]","messagetype":"Inbound Message",
"trennzeichen":"----------------------------","messageid":"ID: 845","url":"Address:
http://localhost:1234/test/testservice","codierung":"Encoding: ISO-8859-1",
"httpmethode":"Http-Method: POST","contenttype":"Content-Type: text/xml",
"headers":"Headers: {connection=[close], Content-Length=[477],
content-type=[text/xml]}","xmlmsg":"<?xml version="1.0"
encoding="ISO-8859-1"?> <soapenv:Envelope
xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:ser="http://service.sc.test.testcompany.com/">soapenv:Bodyser:erzeugeServicenameAUK-CZX-U6Q1
890000NGN-6067</ser:erzeugeServicename></soapenv:Body></soapenv:Envelope>"
,"greedydata":"-------------------------------------- ","parsedxml":{
"xmlns:soapenv":"http://schemas.xmlsoap.org/soap/envelope/","xmlns:ser":
"http://service.sc.test.testcompany.com/","Body":[{"erzeugeServicename":[{
"ServicenameRequest":[{"ID":["AUK-CZX-U6Q"],"sbSOS":["1 890000"],
"sbServicename":["NGN-6067"],"bbSOS":[{}],"bbServicename":[{}]}]}]}]}}]}
org.elasticsearch.index.mapper.MapperParsingException: object mapping [sbSOS
] trying to serialize a value with no field associated with it, current
value [1 890000]
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeValue(
ObjectMapper.java:703)
at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper
.java:500)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeValue(
ObjectMapper.java:707)
at org.elasticsearch.index.mapper.object.ObjectMapper.
serializeNonDynamicArray(ObjectMapper.java:696)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeArray(
ObjectMapper.java:605)
at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper
.java:492)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(
ObjectMapper.java:555)
at org.elasticsearch.index.mapper.object.ObjectMapper.
serializeNonDynamicArray(ObjectMapper.java:686)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeArray(
ObjectMapper.java:605)
at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper
.java:492)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(
ObjectMapper.java:555)
at org.elasticsearch.index.mapper.object.ObjectMapper.
serializeNonDynamicArray(ObjectMapper.java:686)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeArray(
ObjectMapper.java:605)
at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper
.java:492)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(
ObjectMapper.java:555)
at org.elasticsearch.index.mapper.object.ObjectMapper.
serializeNonDynamicArray(ObjectMapper.java:686)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeArray(
ObjectMapper.java:605)
at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper
.java:492)
at org.elasticsearch.index.mapper.object.ObjectMapper.serializeObject(
ObjectMapper.java:555)
at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper
.java:490)
at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.
java:541)
at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.
java:490)
at org.elasticsearch.index.shard.service.InternalIndexShard.
prepareCreate(InternalIndexShard.java:392)
at org.elasticsearch.action.bulk.TransportShardBulkAction.
shardIndexOperation(TransportShardBulkAction.java:444)
at org.elasticsearch.action.bulk.TransportShardBulkAction.
shardOperationOnPrimary(TransportShardBulkAction.java:150)
at org.elasticsearch.action.support.replication.
TransportShardReplicationOperationAction$AsyncShardOperationAction.
performOnPrimary(TransportShardReplicationOperationAction.java:511)
at org.elasticsearch.action.support.replication.
TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(
TransportShardReplicationOperationAction.java:419)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.
java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor
.java:615)
at java.lang.Thread.run(Thread.java:745)
What do I do wrong?
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/f05ce4cb-457d-4cc7-8b0e-143efceb2faf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
