Read this thread to understand what that error is telling you.
You most likely indexed some documents that contain [event][original] (so [event] is an object) since with ECS compatability enabled logstash stores a copy of the [message] field there.
Quickest fix will be to use a different fieldname in your dissect.