[2018-09-20T11:04:58,748][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"appl_2018_09_20", :_type=>"doc", :_routing=>nil}, #<LogStash::Event:0x17712c4e>], :response=>{"index"=>{"_index"=>"appl_2018_09_20", "_type"=>"doc", "_id"=>"PZTv9GUBI4HsTGFi6Qzs", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"field name cannot be an empty string"}}}}}
1 个回复
rochy - rochy_he
赞同来自:
在映射转换的时候遇到了空字符串，貌似是 name 这个字段有空字符串，
你可以检查数据的可靠性，此外可以参考：https://www.elastic.co/guide/e ... .html