filebeat Failed to parse mapping

来源:本站原创 elk 超过944 views围观 0条评论

2017-12-27T10:16:06+08:00 WARN Can not index event (status=400): {"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_default_]: Mapping definition for [error] has unsupported parameters:  [properties : {code={type=long}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}]","caused_by":{"type":"mapper_parsing_exception","reason":"Mapping definition for [error] has unsupported parameters:  [properties : {code={type=long}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}]"}}

——————–尼码版本搞错了。

[root@mysql01 filebeat]# rpm -qa |grep filebeat
error: rpmdbNextIterator: skipping h#      39 Header V3 RSA/SHA256 Signature, key ID f4a80eb5: BAD
filebeat-6.1.1-1.x86_64

elastic 是 5.6哈哈。

—————-重新安装

845  curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.6.5-x86_64.rpm
846  sudo rpm -vi filebeat-5.6.5-x86_64.rpm
847  systemctl enable filebeat
848  vim /etc/filebeat/filebeat.yml
853  systemctl restart filebeat
854  systemctl status filebeat

—————-测试没问题.

文章出自:CCIE那点事 http://www.jdccie.com/ 版权所有。本站文章除注明出处外,皆为作者原创文章,可自由引用,但请注明来源。 禁止全文转载。
本文链接:http://www.jdccie.com/?p=3654转载请注明转自CCIE那点事
如果喜欢:点此订阅本站
  • 相关文章
  • 为您推荐
  • 各种观点

暂时还木有人评论,坐等沙发!
发表评论

您必须 [ 登录 ] 才能发表留言!