filebeat Failed to parse mapping

No Comments elk

2017-12-27T10:16:06+08:00 WARN Can not index event (status=400): {"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_default_]: Mapping definition for [error] has unsupported parameters:  [properties : {code={type=long}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}]","caused_by":{"type":"mapper_parsing_exception","reason":"Mapping definition for [error] has unsupported parameters:  [properties : {code={type=long}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}]"}}

——————–尼码版本搞错了。

[root@mysql01 filebeat]# rpm -qa |grep filebeat
error: rpmdbNextIterator: skipping h#      39 Header V3 RSA/SHA256 Signature, key ID f4a80eb5: BAD
filebeat-6.1.1-1.x86_64

elastic 是 5.6哈哈。

—————-重新安装

845  curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.6.5-x86_64.rpm
846  sudo rpm -vi filebeat-5.6.5-x86_64.rpm
847  systemctl enable filebeat
848  vim /etc/filebeat/filebeat.yml
853  systemctl restart filebeat
854  systemctl status filebeat

—————-测试没问题.

发表评论