Logs on logstash console, I can see "index.mapping.total_fields.limit": 10000 in the logs
C:\apps\logstash-6.3.0\bin>logstash -f ..\config\logstash.conf
Sending Logstash's logs to C:/apps/logstash-6.3.0/logs which is now configured via log4j2.properties
[2018-08-28T02:58:55,313][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2018-08-28T02:58:56,499][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"6.3.0"}
[2018-08-28T02:59:09,582][INFO ][logstash.pipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>6, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50}
[2018-08-28T02:59:11,250][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elasticsearch-machine:9200/]}}
[2018-08-28T02:59:11,273][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elasticsearch-machine:9200/, :path=>"/"}
[2018-08-28T02:59:11,674][WARN ][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=>"http:/elasticsearch-machine:9200/"}
[2018-08-28T02:59:11,826][INFO ][logstash.outputs.elasticsearch] ES Output version determined {:es_version=>6}
[2018-08-28T02:59:11,840][WARN ][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>6}
[2018-08-28T02:59:11,877][INFO ][logstash.outputs.elasticsearch] Using mapping template from {:path=>"C:\\apps\\logstash-6.3.0\\config\\templates\\template.json"}
[2018-08-28T02:59:11,917][INFO ][logstash.outputs.elasticsearch] Attempting to install template {:manage_template=>{"template"=>"event-%{+YYYY.MM.dd}", "settings"=>{"index.number_of_shards"=>1, "index
.refresh_interval"=>"5s", "index.mapping.total_fields.limit"=>10000}, "mappings"=>{"logs"=>{"dynamic_templates"=>[{"boolean_value"=>{"match"=>"*_boolean", "mapping"=>{"type"=>"boolean"}}}, {"string_va
lue"=>{"match"=>"*_string", "mapping"=>{"type"=>"text"}}}, {"number_value"=>{"match"=>"*_number", "mapping"=>{"type"=>"text"}}}, {"boolean_strings"=>{"match_mapping_type"=>"boolean", "mapping"=>{"type
"=>"text"}}}, {"date_strings"=>{"match_mapping_type"=>"date", "mapping"=>{"type"=>"text"}}}, {"double_strings"=>{"match_mapping_type"=>"double", "mapping"=>{"type"=>"text"}}}, {"long_strings"=>{"match
_mapping_type"=>"long", "mapping"=>{"type"=>"text"}}}], "properties"=>{"@timestamp"=>{"type"=>"date", "format"=>"yyyy-MM-dd'T'HH:mm:ss.SSSZ"}, "@version"=>{"type"=>"text"}, "event"=>{"type"=>"nested",
"properties"=>{"resource"=>{"type"=>"nested", "properties"=>{"isSensitive"=>{"type"=>"boolean"}, "uri"=>{"type"=>"text"}, "id"=>{"type"=>"text"}}}, "subject"=>{"type"=>"nested", "properties"=>{"anony
mousId"=>{"type"=>"text"}, "id"=>{"type"=>"text"}, "role"=>{"type"=>"text"}, "sessionId"=>{"type"=>"text"}}}, "action"=>{"type"=>"nested", "properties"=>{"name"=>{"type"=>"text"}, "arguments"=>{"type"
=>"object"}, "outcome"=>{"type"=>"nested", "properties"=>{"result"=>{"type"=>"object"}, "error"=>{"type"=>"text"}}}, "actionTypes"=>{"type"=>"object"}, "time"=>{"type"=>"nested", "properties"=>{"actio
nTime"=>{"type"=>"date", "format"=>"yyyy-MM-dd'T'HH:mm:ss.SSSZ"}}}}}, "environment"=>{"type"=>"nested", "properties"=>{"hostName"=>{"type"=>"text"}, "ip"=>{"type"=>"text"}, "serviceName"=>{"type"=>"te
xt"}, "serviceInstance"=>{"type"=>"text"}}}, "trackingId"=>{"type"=>"text"}, "auditLevel"=>{"type"=>"integer"}}}}}}}}
[2018-08-28T02:59:12,019][INFO ][logstash.outputs.elasticsearch] Installing elasticsearch template to _template/event
[2018-08-28T02:59:12,228][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//elasticsearch-machine"]}
[2018-08-28T02:59:13,895][INFO ][logstash.pipeline ] Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thread:0x34390077 run>"}
[2018-08-28T02:59:14,071][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
[2018-08-28T02:59:14,810][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
{
"host" => "elasticsearch-machine",
"@timestamp" => 2018-08-28T10:07:14.632Z,
"event" => {
"environment" => {
"hostName" => "elasticsearch-machine",
"serviceName" => "hello-service",
"serviceInstance" => "hello-service"
},
"subject" => {
"sessionId" => "37e078e5-e112-48f0-b4af-63cce5b11327",
"id" => "helloDeepak@example.com"
},
"auditLevel" => 1,
"resource" => {
"isSensitive" => "false"
},
"action" => {
"arguments" => {
"lastRenderedTime_string" => "2018-08-28T03:00:43",
"preference" => {
"enableVisitTypeFilter_boolean" => false,
"timezone_string" => "-0700",
"ignoreConsent_boolean" => false
}
},
"time" => {
"actionTime" => "2018-08-28T10:07:13.866Z"
},
"name" => "notification.checkForNewNotifications",
"outcome" => {
"result" => {
"result_boolean" => false,
"lastUpdatedDTTM_string" => "2018-08-28T03:07:13"
}
}
},
"trackingId" => "16dff1c1-91e9-49ca-b2a4-aca2bde04ef8"
},
"path" => "C:/Temp/Tomcat/log/hello-service-event.log",
"message" => "[EVENT] 2018-08-28T03:07:13,877-0700 {\"environment\":{\"hostName\":\"elasticsearch-machine\",\"serviceName\":\"hello-service\",\"serviceInstance\":\"hello-service\"},\"resource\":{\"isSensit
ive\":\"false\"},\"subject\":{\"id\":\"helloDeepak@example.com\",\"sessionId\":\"37e078e5-e112-48f0-b4af-63cce5b11327\"},\"action\":{\"name\":\"notification.checkForNewNotifications\",\"arguments\":{\"l
astRenderedTime_string\":\"2018-08-28T03:00:43\",\"preference\":{\"timezone_string\":\"-0700\",\"enableVisitTypeFilter_boolean\":false,\"ignoreConsent_boolean\":false}},\"time\":{\"actionTime\":\"2018
-08-28T10:07:13.866Z\"},\"outcome\":{\"result\":{\"result_boolean\":false,\"lastUpdatedDTTM_string\":\"2018-08-28T03:07:13\"}}},\"trackingId\":\"16dff1c1-91e9-49ca-b2a4-aca2bde04ef8\",\"auditLevel\":1
}\r",
"@version" => "1"
}
Please help me to resolve this issue.
