Not able to create an index of Metric beat in elasticsearch

Elastic Stack Beats
1

Hi Experts,

I have

metricbeat-5.0.0-alpha4-linux-x86_64
elasticsearch-2.3.3
kibana-4.5.1-linux-x64
Ubuntu

So as suggested by the guide I have downloaded and configure metricbeat but unfortunately I am not able to create an index in elasticsearch . I am getting an error while firing command

./metricbeat" -e -c metricbeat.yml -d "publish"

Error

2016/07/04 12:13:11.740368 output.go:108: DBG output worker: publish 50 events
2016/07/04 12:13:11.751419 client.go:344: WARN Can not index event (status=400): {"type":"mapper_parsing_exception","reason":"Failed to parse mapping [default]: No handler for type [keyword] declared on field [hostname]","caused_by":{"type":"mapper_parsing_exception","reason":"No handler for type [keyword] declared on field [hostname]"}

My metricbeat.yml is like

- module: system
  metricsets:
    - cpu
    - core
    - diskio
    - filesystem
    - memory
    - network
    - process
  enabled: true
  period: 10s
  processes: ['.*']
  cpu_ticks: false

output.elasticsearch:
  hosts: ["ESIP:9200"]
  template.name: "metricbeat"
  template.path: "metricbeat.template.json"
  template.overwrite: false

Please guide me what I am missing ?

Thanks
VG

2

I got this , since template has been already created so i have to delete it , now it works.

3

Also... keep in mind for ES 2.x the template "metricbeat.template-es2x.json" should be used

4

Yes I was using metricbeat.template-es2x.json template only , thank you @michbsd

5

This topic was automatically closed after 21 days. New replies are no longer allowed.