This error seems to be related to mapping issues in Elasticsearch,

Elastic Stack Logstash
1

2023-11-04T10:33:48,353][WARN ][logstash.outputs.elasticsearch][main]
Could not index event to Elasticsearch. {:status=>400, :action=>["index",
{:_id=>nil, :_index=>"staging-2023.11.04", :_type=>"_doc", :routing=>nil},
#LogStash::Event:0x4fdc7ef6], :response=>{"index"=>{"_index"=>"staging-2023.11.04",
"_type"=>"_doc", "_id"=>"adjhghASjfv4456", "status"=>400, "error"=>
{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse field
[kubernetes.labels.app] of type [text] in document with id 'adjhghASjfv4456'.
Preview of field's value: '{kubernetes={io/instance=cert-manager, io/component=cainjector,
io/name=cainjector, io/version=v1.5.4}, value=cainjector}'", "
caused_by"=>{"type"=>"illegal_state_exception",
"reason"=>"Can't get text on a START_OBJECT at 1:1022"}}}}}
/var/log/logstash$ PUT staging-2023.11.04

Any insights or suggestions on how to resolve this issue would be greatly appreciated.

2

Hello,

This is a duplicated of this another post.

Please do not open duplicate posts for the same issue.

3

Closed as duplicate.