Question

使模板基于https://github.com/vanthome/winston-elasticsearch/blob/master/index-template-mapping.json

 {
      "index_patterns": ["applogs-*"],
      "settings": {
        "number_of_shards": 1

      },
      "mappings": {
        "_source": { "enabled": true },
        "properties": {
          "@timestamp": { "type": "date" },
          "@version": { "type": "keyword" },
          "message": { "type": "text", "index": true },
          "severity": { "type": "keyword", "index": true },
          "geohash":{ "type": "geo-point", "index": true},
          "location":{ "type": "geo-point", "index": true},
        }
      }
    }

但出现错误

[mapper_parsing_exception] Root mapping definition has unsupported parameters:  [severity : {index=true, type=keyword}] [@timestamp : {type=date}] [@version : {type=keyword}] [message : {index=true, type=text}] [fields : {dynamic=true, properties={}}]

可能是一些过时的版本？我应该更新什么？

Answer 1

基于docs：

PUT _template/template_1
{
  "index_patterns": [
    "applogs-*"
  ],
  "settings": {
    "number_of_shards": 1
  },
  "mappings": {
    "_source": {
      "enabled": true
    },
    "properties": {
      "@timestamp": {
        "type": "date"
      },
      "@version": {
        "type": "keyword"
      },
      "message": {
        "type": "text",
        "index": true
      },
      "severity": {
        "type": "keyword",
        "index": true
      },
      "geohash": {
        "type": "geo_point",
        "index": true
      },
      "location": {
        "type": "geo_point",
        "index": true
      }
    }
  }
}

您的json无效（一个逗号太多），并且也是geo-point-> geo_point。

elasticsearct puttemplate。 [mapper_parsing_exception]根映射定义具有不受支持的参数

1 个答案: