Reindex from 2.x to elastic 5.x

[lmrc]

Good morning everyone,

I am trying to upgrade elasticsearch with graylog to the newest version. Currently I have the elasticsearch indexes in version 1.7, I can read them from elasticsearch 2.x but I need to reindex to be able to read them in versions 5.x or higher.

For this I am trying to use the reindexing API, but I am getting the following error several times:

"{
“index”: “graylog_2023_re”,
“type”: “message”,
“id”: “f27395d1-92d6-11eb-9a08-525400f612cd”,
“cause”: {
“type”: “mapper_parsing_exception”,
“reason”: “Field [_id] is a metadata field and cannot be added inside a document. Use the index API request parameters.”
},
“status”: 400
},
{
"

Can somebody help me? Thank you.

[warkolm (Mark Walkom)]

Welcome to our community!

What is the request that you passing to Elasticsearch?

[lmrc]

Hi, Thank you @warkolm

The request I was passing to Elasticsearch are:

curl -H 'Content-Type: application/json' -X POST localhost:9200/_reindex?pretty -d'{
"source": {
"remote": {
"host": "http://RemoteIP:9200"
},
"index": "OriginalName"
},
"dest": {
"index": "NewReindexName"
}
}'

I have seen that the problem may be occurring due to the _id field in the indexes but I don't know what the solution could be.

Thank you very much!