Rejecting mapping update to ... as the final mapping would have more than 1 type:

Elastic Stack Elasticsearch
1

ELK all 6. winlogbeat 5.x.

What I need to do, so that is work correctly. Thanks.

Log elasticsearch.

[2017-12-26T16:09:33,848][DEBUG][o.e.a.b.TransportShardBulkAction] [winlogbeat-2017.12.25][1] failed to execute bulk item (index) BulkShardRequest [[winlogbeat-2017.12.25][1]] containing [10] requests
java.lang.IllegalArgumentException: Rejecting mapping update to [winlogbeat-2017.12.25] as the final mapping would have more than 1 type: [eventlogging, wineventlog]
at org.elasticsearch.index.mapper.MapperService.internalMerge(MapperService.java:494) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.index.mapper.MapperService.internalMerge(MapperService.java:350) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.index.mapper.MapperService.merge(MapperService.java:282) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.metadata.MetaDataMappingService$PutMappingExecutor.applyRequest(MetaDataMappingService.java:311) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.metadata.MetaDataMappingService$PutMappingExecutor.execute(MetaDataMappingService.java:230) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.service.MasterService.executeTasks(MasterService.java:640) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.service.MasterService.calculateTaskOutputs(MasterService.java:270) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.service.MasterService.runTasks(MasterService.java:195) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.service.MasterService$Batcher.run(MasterService.java:130) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.service.TaskBatcher.runIfNotProcessed(TaskBatcher.java:150) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.cluster.service.TaskBatcher$BatchedTask.run(TaskBatcher.java:188) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:569) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.common.util.concurrent.PrioritizedEsThreadPoolExecutor$TieBreakingPrioritizedRunnable.runAndClean(PrioritizedEsThreadPoolExecutor.java:247) ~[elasticsearch-6.0.1.jar:6.0.1]
at org.elasticsearch.common.util.concurrent.PrioritizedEsThreadPoolExecutor$TieBreakingPrioritizedRunnable.run(PrioritizedEsThreadPoolExecutor.java:210) ~[elasticsearch-6.0.1.jar:6.0.1]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_151]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_151]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_151]

2

You probably need to upgrade Winlogbeat to 6.0.1 as well (i.e. Winlogbeat 5.x is not compatible with ES 6.x) to make sure all the products of your Elastic Stack are in line.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.