I have been trying to consolidate winlogbeat indexes to improve performance and overall shard count, it was going very nicely until I run into this:
POST _reindex
{
"conflicts": "proceed",
"source": {
"index": "winlogbeat-6.1.1-2018.01.08"
},
"dest": {
"index": "winlogbeat-2018.02wk",
"op_type": "create"
}
}
Result:
{
"took": 6287,
"timed_out": false,
"total": 136847,
"updated": 0,
"created": 19994,
"deleted": 0,
"batches": 20,
"version_conflicts": 0,
"noops": 0,
"retries": {
"bulk": 0,
"search": 0
},
"throttled_millis": 0,
"requests_per_second": -1,
"throttled_until_millis": 0,
"failures": [
{
"index": "winlogbeat-2018.02wk",
"type": "doc",
"id": "U1Lt02AB453XNm_ZtiwS",
"cause": {
"type": "mapper_parsing_exception",
"reason": "failed to parse [event_data.param6]",
"caused_by": {
"type": "illegal_argument_exception",
"reason": "Invalid format: "[1] 0.156, [2] 0.000, [3] 0.000,...""
}
},
"status": 400
},
{
"index": "winlogbeat-2018.02wk",
"type": "doc",
"id": "KVLt02AB453XNm_ZqCw-",
"cause": {
"type": "mapper_parsing_exception",
"reason": "failed to parse [event_data.param6]",
"caused_by": {
"type": "illegal_argument_exception",
"reason": "Invalid format: "0D90FD41-FF6D-4366-B4F5-6010010A489A" is malformed at "D90FD41-FF6D-4366-B4F5-6010010A489A""
}
},
"status": 400
},
{
"index": "winlogbeat-2018.02wk",
"type": "doc",
"id": "VlLt02AB453XNm_ZtiwS",
"cause": {
"type": "mapper_parsing_exception",
"reason": "failed to parse [event_data.param6]",
"caused_by": {
"type": "illegal_argument_exception",
"reason": "Invalid format: "[1] 0.000, [2] 0.000, [3] 0.000,...""
}
},
"status": 400
},
{
"index": "winlogbeat-2018.02wk",
"type": "doc",
"id": "kFLv02AB453XNm_ZHy0O",
"cause": {
"type": "mapper_parsing_exception",
"reason": "failed to parse [event_data.param6]",
"caused_by": {
"type": "illegal_argument_exception",
"reason": "Invalid format: "0D90FD41-FF6D-4366-B4F5-6010010A489A" is malformed at "D90FD41-FF6D-4366-B4F5-6010010A489A""
}
},
"status": 400
},
{
"index": "winlogbeat-2018.02wk",
"type": "doc",
"id": "tlLv02AB453XNm_ZPS2G",
"cause": {
"type": "mapper_parsing_exception",
"reason": "failed to parse [event_data.param6]",
"caused_by": {
"type": "illegal_argument_exception",
"reason": "Invalid format: "[1] 0.000, [2] 0.000, [3] 0.000,...""
}
},
"status": 400
},
{
"index": "winlogbeat-2018.02wk",
"type": "doc",
"id": "91Lv02AB453XNm_ZZC3p",
"cause": {
"type": "mapper_parsing_exception",
"reason": "failed to parse [event_data.param6]",
"caused_by": {
"type": "illegal_argument_exception",
"reason": "Invalid format: "[1] 0.500, [2] 0.000, [3] 0.016,...""
}
},
"status": 400
}
]
}
Any suggestions how I can fix this issue?