# \[SOLVED\]Logstash strange indexing error **URL:** \ **Category:** Logstash\ **Created:** [April 7, 2016, 2:48pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702 "2016-04-07T14:48:24Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)\ **Post date:** [April 7, 2016, 2:48pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/1 "2016-04-07T14:48:24Z")
Hello, During reindexing through logstash I get this error (lot of times...): Should not be that message part also qouted? `Failed action. {:status=>400, :action=>["index", {:_id=>"+lmAQBUf3Mrk9Yymy08bABnbE8mg8EFRHqrx6gqNvfkzBbZ5IvXyi8ZkiXMNxIJMgY3g46sA0cofWwOSDdKeQQ==", :_index=>"logs-torque-2013-12", :_type=>"torque_accounting", :_routing=>nil}, 2013-12-31T23:46:40.000Z {"geoip":{"timezone":"Europe/Prague","ip":"147.231.25.5","latitude":50.08330000000001,"country_code2":"CZ","country_name":"Czech Republic","country_code3":"CZE","continent_code":"EU","location":[14.416699999999992,50.08330000000001],"longitude":14.416699999999992},"ip":"147.231.25.5","name":"torque.farm.particle.cz"} 01/01/2014 00:46:40;S;26399646.torque.farm.particle.cz;user=atlasprd013 group=atlasprd jobname=cream_521474028 queue=gridatlas ctime=1388533344 qtime=1388533344 etime=1388533344 start=1388533600 owner=atlasprd013@cream1.farm.particle.cz exec_host=ibis28/1 Resource_List.neednodes=1 Resource_List.nodect=1 Resource_List.nodes=1 Resource_List.vmem=8000mb Resource_List.walltime=200:00:00], :response=>{"index"=>{"_index"=>"logs-torque-2013-12", "_type"=>"torque_accounting", "_id"=>"+lmAQBUf3Mrk9Yymy08bABnbE8mg8EFRHqrx6gqNvfkzBbZ5IvXyi8ZkiXMNxIJMgY3g46sA0cofWwOSDdKeQQ==", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse [torque.resource_list]", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"unknown property [neednodes]"}}}}, :level=>:warn}` AM ---
**Author:** ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)\ **Post date:** [April 7, 2016, 2:50pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/2 "2016-04-07T14:50:02Z")
It also happens with fresh logs which was not before version 2.3.0 ---
**Author:** ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)\ **Post date:** [April 7, 2016, 3:54pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/3 "2016-04-07T15:54:04Z")
I solved that, but it is starnge taht I needed to define new mapping in place where I didin't need any before... ---
**Author:** ![manasa\_val](https://avatars.discourse-cdn.com/v4/letter/m/ed655f/32.png) [@manasa\_val](https://discuss.elastic.co/u/manasa_val)\ **Post date:** [August 3, 2016, 12:21pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/4 "2016-08-03T12:21:13Z")
Hi, how did you solve it ? can you share your config file? I am getting the same error and wondering for a solution. ---
**Author:** ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)\ **Post date:** [August 3, 2016, 12:47pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/5 "2016-08-03T12:47:20Z")
Hi, my config won't help you. You need to pay attention to variable mapping. It is nearly certain that you are trying to index document into anything flat (string, or whatever). Small example: you first indexed (using recursive kv filter) this ```auto var1="xxxx" var2="1233" var3="euzybei" ``` which resulted into object with these properties: ```auto var1(string)=xxx var2(int)=1233 var3(string)=euzybei ``` This also initialized mapping in ES in this way (you can't index string into var2, because it is int) And now you process: ```auto var1="rrrr" var2="var2_1=1254 var2_2=6523" var3="euzi" ``` which leads to ```auto var1(string)=rrrr var2(document)= var2_1(int)=1254 var2_2(int)=6523 var3(string)=euzi ``` Which fails with precisely this error Your previous mapping for var2 is int and you can't index document into it. You need to take care of this in your ES template. ---
**Author:** ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)\ **Post date:** [August 3, 2016, 12:51pm UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/6 "2016-08-03T12:51:30Z")
If this won't help you, please share your config (ES and LS) and a sample (big one) of input data. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:45am UTC](https://discuss.elastic.co/t/solved-logstash-strange-indexing-error/46702/7 "2017-07-06T04:45:06Z")
Closed on July 6, 2017, 4:45am UTC