Reindex parse_exception

Elastic Stack Elasticsearch
#1 
POST _reindex?wait_for_completion=true
{
  "source": {
    "index": "apm-7.8.1-transaction-000007",
    "query": {
      "match_all": {}
     }
    },
  "dest": {
    "index": "apm-7.8.1-transaction-new-000007",
    "pipeline": "apm"
  }
}

image
image1040×262 16.1 KB

I don't know what fields are missing in the query. Can someone tell me?

#2

image
image1823×625 35.4 KB

I changed the dest index and got another error.

POST _reindex?wait_for_completion=true
{
  "source": {
    "index": "apm-7.8.1-transaction-000007",
    "query": {
      "match_all": {}
     }
    },
  "dest": {
    "index": "xxx",
    "pipeline": "apm"
  }
}

{
  "took" : 15389,
  "timed_out" : false,
  "total" : 2005123,
  "updated" : 0,
  "created" : 5999,
  "deleted" : 0,
  "batches" : 6,
  "version_conflicts" : 0,
  "noops" : 0,
  "retries" : {
    "bulk" : 0,
    "search" : 0
  },
  "throttled_millis" : 0,
  "requests_per_second" : -1.0,
  "throttled_until_millis" : 0,
  "failures" : [
    {
      "index" : "xxx",
      "type" : "_doc",
      "id" : "ETAfOHcB06kXv1MquoHJ",
      "cause" : {
        "type" : "mapper_parsing_exception",
        "reason" : "failed to parse field [request_body.fromDateTime] of type [date] in document with id 'ETAfOHcB06kXv1MquoHJ'. Preview of field's value: ''",
        "caused_by" : {
          "type" : "illegal_argument_exception",
          "reason" : "cannot parse empty date"
        }
      },
      "status" : 400
    }
  ]
}
#3

Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable.

Instead, paste the text and format it with </> icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer.

It would be great if you could update your post to solve this.

#4

I think that a field is a date type and you are sending probably an empty content instead of nothing at all...

Hard to say without seeing more like the destination mapping, and the source document which is failing.

#5

I have updated it.
I don't understand the meaning of the first picture. What is it missing?

For the second picture, what should I pay attention to when reindex.

#6

Of the content. I think that:

{
  "request_body.fromDateTime": ""
}

Is not a valid date.

This is probably something you need to fix in the source or in the apm pipeline.
It's unclear here what is the source document is looking like and what is the destination mapping.

I don't see anything bad so I don't understand either. May be a bad character somewhere?

#7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.