Packetbeat >= 7.0.0: Root mapping definition has unsupported parameters

Elastic Stack Beats
1

Hi,

packetbeat in version >= 7.0.0 gives:

[2019-09-11T11:28:41,165][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"packetbeat-2019.09.11", :_type=>"_doc", :routing=>nil}, #LogStash::Event:0x5848d9a9], :response=>{"index"=>{"_index"=>"packetbeat-2019.09.11", "_type"=>"_doc", "_id"=>nil, "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"Failed to parse mapping [default]: Root mapping definition has unsupported parameters: [_all : {norms=false}]", "caused_by"=>{"type"=>"mapper_parsing_exception", "reason"=>"Root mapping definition has unsupported parameters: [_all : {norms=false}]"}}}}}

with a stack in version >= 7.0.0.

For a stack in version <= 7.0.0 this error does not occur.

Is there something I could do?

Best regards,
Robert

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.