# Org.elasticsearch.index.mapper.MapperParsingException: failed to parse -- NEED HELP

**URL:** <https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-need-help/23350>\
**Category:** Elasticsearch\
**Created:** [April 21, 2015, 9:23pm UTC](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-need-help/23350 "2015-04-21T21:23:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tony\_Chong\_2](https://avatars.discourse-cdn.com/v4/letter/t/db5fbb/32.png) [@Tony\_Chong\_2](https://discuss.elastic.co/u/Tony_Chong_2)\
**Post date:** [April 21, 2015, 9:23pm UTC](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-need-help/23350/1 "2015-04-21T21:23:12Z")

</div>

Hi,

Hello. I have read about similar problems online but haven't really figured  
out what the solution is, and was hoping somebody can point me in the right  
direction.

I'm using ELK.

ES 1.5.0  
Logstash 1.5.0rc2  
Kibana 4.0.1

I have all type of application logs that are written out as JSON, but the  
JSON can be nested, and there are values that can sometimes be null. If I  
delete all my indices, and restart everything from scratch (restart  
elasticsearch, kibana and logstash), everything works fine. Every 2 or 3  
weeks, I start seeing errors such as these:

[2015-04-21 21:15:22,197][DEBUG][action.bulk]  
[elasticsearch09] [logstash-2015.04.21][20] failed to execute bulk item  
(index) index {[logstash-2015.04.21][exchange][AUzd1drI5RY1eWdGgIZm],  
source[{"log\_type":"error\_server\_response","app\_name":"Adap.TV Advertising  
iOS","app\_id":"538e2980a1df5de7790000e7","pub\_app\_id":"653967729","streaming\_url":"[http://u-ads.adap.tv/a/h/eaLAQ7VgTRxUq8XV5RJZpiQfAqV5UMkXExLyYUmEPHM=?cb=2015-04-21T05%3A16%3A28%2B00%3A00&pet=preroll&pageUrl=apps%3A%2F%2FCharades!%20Guess%20Words%20and%20Draw%20or%20Doodle%20Something%20Taboo%20Tilt%20Your%20Heads%20Jump%20Up%20with%20Friends%20Free&a.ip=76.165.97.2&a.aid=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.idfa=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.ua=Mozilla%2F5.0%20(iPhone%3B%20CPU%20iPhone%20OS%207\_1\_1%20like%20Mac%20OS%20X)%20AppleWebKit%2F537.51.2%20(KHTML%2C%20like%20Gecko)%20Mobile%2F11D201&eov=eov","error":"Cannot](http://u-ads.adap.tv/a/h/eaLAQ7VgTRxUq8XV5RJZpiQfAqV5UMkXExLyYUmEPHM=?cb=2015-04-21T05%3A16%3A28%2B00%3A00&pet=preroll&pageUrl=apps%3A%2F%2FCharades!%20Guess%20Words%20and%20Draw%20or%20Doodle%20Something%20Taboo%20Tilt%20Your%20Heads%20Jump%20Up%20with%20Friends%20Free&a.ip=76.165.97.2&a.aid=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.idfa=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.ua=Mozilla%2F5.0%20(iPhone%3B%20CPU%20iPhone%20OS%207_1_1%20like%20Mac%20OS%20X)%20AppleWebKit%2F537.51.2%20(KHTML%2C%20like%20Gecko)%20Mobile%2F11D201&eov=eov%22,%22error%22:%22Cannot)  
have empty  
VAST","host":"ip-10-233-53-75","level":"info","message":"","timestamp":"2015-04-21  
05:16:29.021","@version":"1","@timestamp":"2015-04-21T21:15:22.087Z","type":"exchange"}]}  
org.elasticsearch.index.mapper.MapperParsingException: object mapping for  
[exchange] tried to parse field [error] as object, but got EOF, has a  
concrete value been provided to it?  
at  
org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:495)  
at  
org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:544)  
at  
org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:493)  
at  
org.elasticsearch.index.shard.IndexShard.prepareCreate(IndexShard.java:438)  
at  
org.elasticsearch.action.bulk.TransportShardBulkAction.shardIndexOperation(TransportShardBulkAction.java:432)  
at  
org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:149)  
at  
org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction.performOnPrimary(TransportShardReplicationOperationAction.java:515)  
at  
org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(TransportShardReplicationOperationAction.java:422)  
at  
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)  
at  
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)  
at java.lang.Thread.run(Thread.java:745)

AND

[2015-04-21 21:19:09,286][DEBUG][action.bulk]  
[elasticsearch03] [logstash-2015.04.21][19] failed to execute bulk item  
(index) index {[logstash-2015.04.21][requestAds][AUzd2VGHPBf0vCHmQV4j],  
source[{"country":"BR","region":"18","city":"Curitiba","latitude":null,"longitude":null,"device\_language":"pt","browser\_user\_agent":"VungleDroid/3.3.0","is\_sd\_card\_available":1,"device\_make":"motorola","device\_model":"XT1033","device\_height":1184,"device\_width":720,"os\_version":"5.0.2","platform":"android","sound\_enabled":false,"volume":0,"device\_id":"5ec495a3-80cb-4682-a0a9-c66c2ca122ea","ifa":"5ec495a3-80cb-4682-a0a9-c66c2ca122ea","isu":"5ec495a3-80cb-4682-a0a9-c66c2ca122ea","user\_age":null,"user\_gender":null,"ip\_address":"189.123.219.242","connection":"wifi","network\_operator":"TIM","pub\_app\_id":"507686ae771615941001aca5","pub\_app\_bundle\_id":"com.kiloo.subwaysurf","ad\_app\_id":null,"campaign\_id":null,"creative\_id":null,"event\_id":null,"sleep":-1,"strategy":null,"expiry":null,"post\_bundle":null,"video\_url":null,"show\_close":null,"show\_close\_incentivized":null,"video\_height":null,"video\_width":null,"call\_to\_action\_url":null,"call\_to\_action\_destination":null,"countdown":null,"delay":null,"error":"Cached  
ad is  
better","shouldStream":false,"message":"","is\_test":false,"host":"ip-10-155-170-179","level":"info","timestamp":"2015-04-21  
21:18:21.280","@version":"1","@timestamp":"2015-04-21T21:19:07.996Z","type":"requestAds"}]}  
org.elasticsearch.index.mapper.MapperParsingException: failed to parse  
[error]  
at  
org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:410)  
at  
org.elasticsearch.index.mapper.object.ObjectMapper.serializeValue(ObjectMapper.java:706)  
at  
org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:497)  
at  
org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:544)  
at  
org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:493)  
at  
org.elasticsearch.index.shard.IndexShard.prepareCreate(IndexShard.java:438)  
at  
org.elasticsearch.action.bulk.TransportShardBulkAction.shardIndexOperation(TransportShardBulkAction.java:432)  
at  
org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:149)  
at  
org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction.performOnPrimary(TransportShardReplicationOperationAction.java:515)  
at  
org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(TransportShardReplicationOperationAction.java:422)  
at  
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)  
at  
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)  
at java.lang.Thread.run(Thread.java:745)  
Caused by: java.lang.NumberFormatException: For input string: "Cached ad is  
better"  
at  
java.lang.NumberFormatException.forInputString(NumberFormatException.java:65)  
at java.lang.Long.parseLong(Long.java:441)  
at java.lang.Long.parseLong(Long.java:483)  
at  
org.elasticsearch.common.xcontent.support.AbstractXContentParser.longValue(AbstractXContentParser.java:145)  
at  
org.elasticsearch.index.mapper.core.LongFieldMapper.innerParseCreateField(LongFieldMapper.java:300)  
at  
org.elasticsearch.index.mapper.core.NumberFieldMapper.parseCreateField(NumberFieldMapper.java:236)  
at  
org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:400)  
... 12 more

I'm wondering if I have to build custom indicies? This didn't seem to be a  
problem with my older versions of Logstash and Elasticsearch.

Thanks!

Tony

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/285fb32b-abf5-4d42-94f2-7ca58c75dcf7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/285fb32b-abf5-4d42-94f2-7ca58c75dcf7%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 22, 2015, 9:46am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-need-help/23350/2 "2015-04-22T09:46:34Z")

</div>

I think you mapping expects an object for the error field but you sent a string in it.

--  
David Pilato - Developer | Evangelist

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co/)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

@dadoonet [https://twitter.com/dadoonet](https://twitter.com/dadoonet) | @elasticsearchfr [https://twitter.com/elasticsearchfr](https://twitter.com/elasticsearchfr) | @scrutmydocs [https://twitter.com/scrutmydocs](https://twitter.com/scrutmydocs)

> Le 21 avr. 2015 à 23:23, Tony Chong [tony.chong@vungle.com](mailto:tony.chong@vungle.com) a écrit :
> 
> Hi,
> 
> Hello. I have read about similar problems online but haven't really figured out what the solution is, and was hoping somebody can point me in the right direction.
> 
> I'm using ELK.
> 
> ES 1.5.0  
> Logstash 1.5.0rc2  
> Kibana 4.0.1
> 
> I have all type of application logs that are written out as JSON, but the JSON can be nested, and there are values that can sometimes be null. If I delete all my indices, and restart everything from scratch (restart elasticsearch, kibana and logstash), everything works fine. Every 2 or 3 weeks, I start seeing errors such as these:
> 
> [2015-04-21 21:15:22,197][DEBUG][action.bulk] [elasticsearch09] [logstash-2015.04.21][20] failed to execute bulk item (index) index {[logstash-2015.04.21][exchange][AUzd1drI5RY1eWdGgIZm], source[{"log\_type":"error\_server\_response","app\_name":"[Adap.TV](http://Adap.TV) Advertising iOS","app\_id":"538e2980a1df5de7790000e7","pub\_app\_id":"653967729","streaming\_url":"[http://u-ads.adap.tv/a/h/eaLAQ7VgTRxUq8XV5RJZpiQfAqV5UMkXExLyYUmEPHM=?cb=2015-04-21T05%3A16%3A28%2B00%3A00&pet=preroll&pageUrl=apps%3A%2F%2FCharades!%20Guess%20Words%20and%20Draw%20or%20Doodle%20Something%20Taboo%20Tilt%20Your%20Heads%20Jump%20Up%20with%20Friends%20Free&a.ip=76.165.97.2&a.aid=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.idfa=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.ua=Mozilla%2F5.0%20(iPhone%3B%20CPU%20iPhone%20OS%207\_1\_1%20like%20Mac%20OS%20X)%20AppleWebKit%2F537.51.2%20(KHTML%2C%20like%20Gecko)%20Mobile%2F11D201&eov=eov","error":"Cannot](http://u-ads.adap.tv/a/h/eaLAQ7VgTRxUq8XV5RJZpiQfAqV5UMkXExLyYUmEPHM=?cb=2015-04-21T05%3A16%3A28%2B00%3A00&pet=preroll&pageUrl=apps%3A%2F%2FCharades!%20Guess%20Words%20and%20Draw%20or%20Doodle%20Something%20Taboo%20Tilt%20Your%20Heads%20Jump%20Up%20with%20Friends%20Free&a.ip=76.165.97.2&a.aid=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.idfa=15eaddd2-52fe-401f-b33c-333f5f78e01f&a.ua=Mozilla%2F5.0%20(iPhone%3B%20CPU%20iPhone%20OS%207_1_1%20like%20Mac%20OS%20X)%20AppleWebKit%2F537.51.2%20(KHTML%2C%20like%20Gecko)%20Mobile%2F11D201&eov=eov%22,%22error%22:%22Cannot) have empty VAST","host":"ip-10-233-53-75","level":"info","message":"","timestamp":"2015-04-21 05:16:29.021","@version":"1","@timestamp":"2015-04-21T21:15:22.087Z","type":"exchange"}]}  
> org.elasticsearch.index.mapper.MapperParsingException: object mapping for [exchange] tried to parse field [error] as object, but got EOF, has a concrete value been provided to it?  
> at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:495)  
> at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:544)  
> at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:493)  
> at org.elasticsearch.index.shard.IndexShard.prepareCreate(IndexShard.java:438)  
> at org.elasticsearch.action.bulk.TransportShardBulkAction.shardIndexOperation(TransportShardBulkAction.java:432)  
> at org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:149)  
> at org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction.performOnPrimary(TransportShardReplicationOperationAction.java:515)  
> at org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(TransportShardReplicationOperationAction.java:422)  
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)  
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)  
> at java.lang.Thread.run(Thread.java:745)
> 
> AND
> 
> [2015-04-21 21:19:09,286][DEBUG][action.bulk] [elasticsearch03] [logstash-2015.04.21][19] failed to execute bulk item (index) index {[logstash-2015.04.21][requestAds][AUzd2VGHPBf0vCHmQV4j], source[{"country":"BR","region":"18","city":"Curitiba","latitude":null,"longitude":null,"device\_language":"pt","browser\_user\_agent":"VungleDroid/3.3.0","is\_sd\_card\_available":1,"device\_make":"motorola","device\_model":"XT1033","device\_height":1184,"device\_width":720,"os\_version":"5.0.2","platform":"android","sound\_enabled":false,"volume":0,"device\_id":"5ec495a3-80cb-4682-a0a9-c66c2ca122ea","ifa":"5ec495a3-80cb-4682-a0a9-c66c2ca122ea","isu":"5ec495a3-80cb-4682-a0a9-c66c2ca122ea","user\_age":null,"user\_gender":null,"ip\_address":"189.123.219.242","connection":"wifi","network\_operator":"TIM","pub\_app\_id":"507686ae771615941001aca5","pub\_app\_bundle\_id":"com.kiloo.subwaysurf","ad\_app\_id":null,"campaign\_id":null,"creative\_id":null,"event\_id":null,"sleep":-1,"strategy":null,"expiry":null,"post\_bundle":null,"video\_url":null,"show\_close":null,"show\_close\_incentivized":null,"video\_height":null,"video\_width":null,"call\_to\_action\_url":null,"call\_to\_action\_destination":null,"countdown":null,"delay":null,"error":"Cached ad is better","shouldStream":false,"message":"","is\_test":false,"host":"ip-10-155-170-179","level":"info","timestamp":"2015-04-21 21:18:21.280","@version":"1","@timestamp":"2015-04-21T21:19:07.996Z","type":"requestAds"}]}  
> org.elasticsearch.index.mapper.MapperParsingException: failed to parse [error]  
> at org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:410)  
> at org.elasticsearch.index.mapper.object.ObjectMapper.serializeValue(ObjectMapper.java:706)  
> at org.elasticsearch.index.mapper.object.ObjectMapper.parse(ObjectMapper.java:497)  
> at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:544)  
> at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:493)  
> at org.elasticsearch.index.shard.IndexShard.prepareCreate(IndexShard.java:438)  
> at org.elasticsearch.action.bulk.TransportShardBulkAction.shardIndexOperation(TransportShardBulkAction.java:432)  
> at org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:149)  
> at org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction.performOnPrimary(TransportShardReplicationOperationAction.java:515)  
> at org.elasticsearch.action.support.replication.TransportShardReplicationOperationAction$AsyncShardOperationAction$1.run(TransportShardReplicationOperationAction.java:422)  
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)  
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)  
> at java.lang.Thread.run(Thread.java:745)  
> Caused by: java.lang.NumberFormatException: For input string: "Cached ad is better"  
> at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65)  
> at java.lang.Long.parseLong(Long.java:441)  
> at java.lang.Long.parseLong(Long.java:483)  
> at org.elasticsearch.common.xcontent.support.AbstractXContentParser.longValue(AbstractXContentParser.java:145)  
> at org.elasticsearch.index.mapper.core.LongFieldMapper.innerParseCreateField(LongFieldMapper.java:300)  
> at org.elasticsearch.index.mapper.core.NumberFieldMapper.parseCreateField(NumberFieldMapper.java:236)  
> at org.elasticsearch.index.mapper.core.AbstractFieldMapper.parse(AbstractFieldMapper.java:400)  
> ... 12 more
> 
> I'm wondering if I have to build custom indicies? This didn't seem to be a problem with my older versions of Logstash and Elasticsearch.
> 
> Thanks!
> 
> Tony
> 
> --  
> You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com) [mailto:elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/285fb32b-abf5-4d42-94f2-7ca58c75dcf7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/285fb32b-abf5-4d42-94f2-7ca58c75dcf7%40googlegroups.com) [https://groups.google.com/d/msgid/elasticsearch/285fb32b-abf5-4d42-94f2-7ca58c75dcf7%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/285fb32b-abf5-4d42-94f2-7ca58c75dcf7%40googlegroups.com?utm_medium=email&utm_source=footer).  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout) [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/C74AC175-77FA-4433-B698-7E6CB264AC4C%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/C74AC175-77FA-4433-B698-7E6CB264AC4C%40pilato.fr).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:18am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-need-help/23350/3 "2017-07-06T00:18:22Z")

</div>


