Warning message

Elastic Stack Logstash
1

I am getting the following message when trying to send data to ES.

[2018-03-12T21:32:21,710][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch......"error"=>{"type"=>"mapper_parsing_exception", "reason"=>"Field name [NAME.ID] cannot contain '.'"}}}

How can I fix this issue?

ES 2.4.1 (not 4.4.0)
LS 5.6.8

2

ES 4.4 doesn't support dots in field names. Perhaps the de_dot Logstash filter can help, or maybe upgrading to ES 5 or later is an option.

3

thanks for the info, looks like I have to upgrade ES to a later version.