Hey everyone, I have an issue indexing a log message. It's a mapping error.
"status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse field [messageObject] of type [text]", "caused_by"=>{"type"=>"illegal_state_exception", "reason"=>"Can't get text on a START_OBJECT at 1:2364"
The field messageObject is mapped like so:
"messageObject" : {
"properties" : {
"ClassName" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
The messages are being stored in a dead letter queue, so when I check an example, I can see that the message in question has a very long messageObject field. I'm really new at this, so any help interpreting and fixing this is much appreciated.