.monitoring-es-9-mb is missing

Elastic Stack Elasticsearch
1

Hi, i just migrate to elk 9, i just notice that
.monitoring-es-mb System index template still using .monitoring-es-8-*

IMG_1788
IMG_17882737×1648 403 KB

I also have these error in elk log:
[2025-04-16T07:57:24,226][INFO ][o.e.x.i.a.TransportPutLifecycleAction] [holocronvault-hot] updating index lifecycle policy [metricbeat]
[2025-04-16T07:59:06,226][INFO ][o.e.i.m.DocumentMapper ] [holocronvault-hot][.ds-.monitoring-es-8-mb-2025.04.16-000001] Error while parsing document for index [.ds-.monitoring-es-8-mb-2025.04.16-000001]: [1:996] failed to parse field [elasticsearch.index.creation_date] of type [date] in document with id 'z913PpYBOR8hDRcyk_re'. Preview of field's value: ''
org.elasticsearch.index.mapper.DocumentParsingException: [1:996] failed to parse field [elasticsearch.index.creation_date] of type [date] in document with id 'z913PpYBOR8hDRcyk_re'. Preview of field's value: ''
at org.elasticsearch.index.mapper.FieldMapper.rethrowAsDocumentParsingException(FieldMapper.java:242) ~[elasticsearch-9.0.0.jar:?]

Anyone have a idea?

Thanks

2

The monitoring index templates have not changed in a good while, so the index names didn't need to change.
Is there more to the stack trace?

3

Hello

The the full stack trace:

[2025-04-17T17:02:35,622][INFO ][o.e.i.m.DocumentMapper   ] [yoda][.ds-.monitoring-es-8-mb-2025.04.16-000001] Error while parsing document for index [.ds-.monitoring-es-8-mb-2025.04.16-000001]: [1:1476] failed to parse field [elasticsearch.index.creation_date] of type [date] in document with id 'yQWPRZYBixsocmbzg0uf'. Preview of field's value: ''
org.elasticsearch.index.mapper.DocumentParsingException: [1:1476] failed to parse field [elasticsearch.index.creation_date] of type [date] in document with id 'yQWPRZYBixsocmbzg0uf'. Preview of field's value: ''
        at org.elasticsearch.index.mapper.FieldMapper.rethrowAsDocumentParsingException(FieldMapper.java:242) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.FieldMapper.parse(FieldMapper.java:195) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrField(DocumentParser.java:469) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseValue(DocumentParser.java:811) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.innerParseObject(DocumentParser.java:389) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrNested(DocumentParser.java:340) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrField(DocumentParser.java:449) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.doParseObject(DocumentParser.java:536) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObject(DocumentParser.java:524) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.innerParseObject(DocumentParser.java:379) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrNested(DocumentParser.java:340) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrField(DocumentParser.java:449) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.doParseObject(DocumentParser.java:536) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObject(DocumentParser.java:524) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.innerParseObject(DocumentParser.java:379) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrNested(DocumentParser.java:340) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.internalParseDocument(DocumentParser.java:152) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentParser.parseDocument(DocumentParser.java:98) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:128) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.shard.IndexShard.prepareIndex(IndexShard.java:1063) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.shard.IndexShard.applyIndexOperation(IndexShard.java:990) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.shard.IndexShard.applyIndexOperationOnPrimary(IndexShard.java:934) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.action.bulk.TransportShardBulkAction.executeBulkItemRequest(TransportShardBulkAction.java:397) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.action.bulk.TransportShardBulkAction$2.doRun(TransportShardBulkAction.java:254) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:27) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.action.bulk.TransportShardBulkAction.performOnPrimary(TransportShardBulkAction.java:322) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.action.bulk.TransportShardBulkAction.dispatchedShardOperationOnPrimary(TransportShardBulkAction.java:170) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.action.bulk.TransportShardBulkAction.dispatchedShardOperationOnPrimary(TransportShardBulkAction.java:83) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.action.support.replication.TransportWriteAction$1.doRun(TransportWriteAction.java:220) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:27) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:34) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:1044) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:27) ~[elasticsearch-9.0.0.jar:?]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1095) ~[?:?]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:619) ~[?:?]
        at java.lang.Thread.run(Thread.java:1447) ~[?:?]
Caused by: java.lang.IllegalArgumentException: cannot parse empty datetime
        at org.elasticsearch.common.time.JavaDateFormatter.parse(JavaDateFormatter.java:223) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DateFieldMapper$DateFieldType.parse(DateFieldMapper.java:521) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.DateFieldMapper.parseCreateField(DateFieldMapper.java:950) ~[elasticsearch-9.0.0.jar:?]
        at org.elasticsearch.index.mapper.FieldMapper.parse(FieldMapper.java:193) ~[elasticsearch-9.0.0.jar:?]
        ... 34 more

I just reinstall a new ELK Stack, and i got the same error when i start metricbeat for stack monitoring on the master node. No problem with warm and cold node.

Thanks for your help