我正在尝试设置一个heka + elasticsearch + kibana堆栈来存储和搜索日志,因此我对elasticsearch没有任何了解,但我注意到一些日志条目被丢弃,并显示错误消息这样:
[2016-03-02 09:37:17,440][DEBUG][action.bulk ] [Madame MacEvil] [heka-2016.03.02][3] failed to execute bulk item (index) index {[heka-2016.03.02][message][AVM2eV_-J4Kw0FFvoFfq], source[{"host":"host1","error":"No delimiter found. Code 200","Timestamp":"2016-03-02T08:37:17","Severity":6}]}
MapperParsingException[failed to parse [error]]; nested: NumberFormatException[For input string: "No delimiter found. Code 200"];
显然由于某种原因,ES尝试将error
字符串解析为数字并且显然失败。
如何解决这个问题?