MapperPrsing Exception in METRICBEANS

Hi

We are using elasticsearch 1.5.2
Insalled metricbeat by command :
curl -L -O https://download.elastic.co/beats/metricbeat/metricbeat-5.0.0-alpha5-x86_64.rpm

Configuration:
in metricbeat.yml file:
metricbeat.modules:

#------------------------------- System Module -------------------------------

  • module: system
    metricsets:

    • cpu
    • load
    • filesystem
    • memory
    • network
    • process
      enabled: true
      period: 10s
      processes: ['.*']

    if true, exports the CPU usage in ticks, together with the percentage values

    cpu_ticks: false
    output.elasticsearch:
    hosts: ["ourip:9200"]
    template.enabled: true
    template.path: "metricbeat.template.json"
    template.overwrite: false
    Optional protocol and basic auth credentials.

After configuration starting METRICBEATS: /etc/init.d/metricbeat start
Getting:
Started the metricbeat displaying status INFO Register [ModuleFactory:[], MetricSetFactory:[apache/status, mongodb/status, mysql/status, nginx/stubstatus, redis/info, redis/keyspace, system/core, system/cpu, system/diskio, system/filesystem, system/fsstat, system/load, system/memory, system/network, system/process, zookeeper/mntr]]

But getting warning in metricbeat logs :WARN Can not index event (status=400): "MapperParsingException[mapping [default]]; nested: MapperParsingException[No handler for type [keyword] declared on field [tags]]; "

Due to this "metricbeat" index is not craeted.......

PLease anyone help me regarding this as iam new to this concept....
ThankYOU

That version of metricbeat is not compatible with such an old ES version unfortunately.

Hi,

Thanks For your reply..

Can u please send me the metricbeat matrix for elastic-search versions Please..

Thank You

Metricbeat 5 with ES 5.

OKay but what version of metricbeat we can use for elasticsearch 1.5.2 please suugest. metricbeat 4 is fine ?..Or we get the same issue? Also please help me how to remove or unintsall metricbeat...

There is no metricbeat before 5.0.

Have a look at topbeat instead.