Problem: [logstash.outputs.elasticsearch] Could not index event to Elasticsearch-wazuh-alerts-3.x-2020.05.30

[ptamba]

please avoid using screenshot when pasting configs. use </> instead

@Harsha7071

2020.05.30", "_type"=>"wazuh", "_id"=>"wbPoZXIBPjTouCeTDVEP", "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"mapper [host] of different type, current_type [keyword], merged_type [ObjectMapper]"}}}}

you tried to index an keyword data type, while your index template uses object. either change your template or change the data you’re trying to index to an object.