Saved "field" parameter is now invalid

Elastic Stack Kibana
1

Hello,

I have an error on discover tab in kibana 5.1.

It appeared since i have configure dynamic template (when i delete it, it's work fine).

Capture.JPG723×261 15.4 KB

I go see another topic about that but it's not the same problem.

Before creation of template it's works but now no.

Here the template i use :

{
  "templatecra": {
    "order": 0,
    "version": 50001,
    "template": "cra-*",
    "settings": {
      "index": {
        "number_of_shards": "1",
        "number_of_replicas": "0",
        "refresh_interval": "-1"
      }
    },
    "mappings": {
      "_default_": {
        "dynamic_templates": [
          {
            "string_fields": {
              "mapping": {
                "norms": false,
                "type": "text",
                "fields": {
                  "keyword": {
                    "index": "not_analyzed",
                    "type": "keyword"
                  }
                }
              },
              "match_mapping_type": "string",
              "match": "*"
            }
          }
        ],
        "_all": {
          "norms": false,
          "enabled": true
        },
        "properties": {
          "cra_Amol": {
            "type": "long"
          },
          "cra_recor": {
            "type": "byte"
          },
          "geoip": {
            "enabled": false
          },
          "cra_II": {
            "type": "long"
          },
          "input_type": {
            "enabled": false
          },
          "tags": {
            "enabled": false
          },
          "@timestamp": {
            "include_in_all": false,
            "type": "date"
          },
          "beat": {
            "enabled": false
          },
          "@version": {
            "include_in_all": false,
            "type": "keyword"
          },
          "name": {
            "enabled": false
          },
          "host": {
            "enabled": false
          },
          "cra_SI": {
            "type": "long"
          },
          "cra_ISDN": {
            "type": "long"
          },
          "cra_Nid": {
            "type": "long"
          }
        }
      }
    },
    "aliases": {}
  }

And my logstash conf is :

csv {
      columns => [ " _fields_ " ]
        separator => "|"
         }

    mutate {
        remove_field => [ "message", "cra_ame", "cra_ratpe", "cra_Ser" ]
           }

What is the problem ??

2

Hello,

Did you check that all the fields here have a type shown in Kibana, in the IndexPattern page?
Also, if that's OK, can you try removing that overload for the _all field from you mapping?

3

OK, i see every field in index pattern page (numeric and text). But i have always this error message

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.