filebeat Failed to parse mapping

來源:本站原創 elk 超過1,762 views圍觀 0條評論

2017-12-27T10:16:06+08:00 WARN Can not index event (status=400): {"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_default_]: Mapping definition for [error] has unsupported parameters:  [properties : {code={type=long}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}]","caused_by":{"type":"mapper_parsing_exception","reason":"Mapping definition for [error] has unsupported parameters:  [properties : {code={type=long}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}]"}}

——————–尼碼版本搞錯了。

[[email protected] filebeat]# rpm -qa |grep filebeat
error: rpmdbNextIterator: skipping h#      39 Header V3 RSA/SHA256 Signature, key ID f4a80eb5: BAD
filebeat-6.1.1-1.x86_64

elastic 是 5.6哈哈。

—————-重新安裝

845  curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.6.5-x86_64.rpm
846  sudo rpm -vi filebeat-5.6.5-x86_64.rpm
847  systemctl enable filebeat
848  vim /etc/filebeat/filebeat.yml
853  systemctl restart filebeat
854  systemctl status filebeat

—————-測試沒問題.

文章出自:CCIE那點事 http://www.qdxgqk.live/ 版權所有。本站文章除注明出處外,皆為作者原創文章,可自由引用,但請注明來源。 禁止全文轉載。
本文鏈接:http://www.qdxgqk.live/?p=3654轉載請注明轉自CCIE那點事
如果喜歡:點此訂閱本站
  • 相關文章
  • 為您推薦
  • 各種觀點
?
暫時還木有人評論,坐等沙發!
發表評論

您必須 [ 登錄 ] 才能發表留言!

?
?
萌宠夺宝游戏