Mapping filebeat index to geo-point

I used this mapping to my filebeat index template

PUT /filebeat-*/?pretty
{
"mappings": {
"syslog": {
"properties": {
"geoip.location": {
"type": "geo_point"
}
}
}
}
}

and i got this error
{
"error": {
"root_cause": [
{
"type": "invalid_index_name_exception",
"reason": "Invalid index name [filebeat-], must not contain the following characters [ , ", , \, <, |, ,, >, /, ?]",
"index_uuid": "na",
"index": "filebeat-
"
}
],
"type": "invalid_index_name_exception",
"reason": "Invalid index name [filebeat-
], must not contain the following characters [ , ", , \, <, |, ,, >, /, ?]",
"index_uuid": "na",
"index": "filebeat-
"
},
"status": 400
}

i need to set this mapping for my Filebeat index pattern

I think you want to put that as a template, not an index mapping - https://www.elastic.co/guide/en/elasticsearch/reference/5.5/indices-templates.html

1 Like

Thank you so much @warkolm ,Really it was helpfull

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.