hi, i’m migrating from elastic 7.2 to opensearch 2.7 and i’m getting this error on 2 fields:
failed to parse field [event] of type [text] in document with id
this field used to work fine with elastic (it’s keyword)
I tried replacing this to text but still getting the same error
any ideas?
@taltsafrir Could you share the mapping of the event field from the source and destination indices?
Could you describe your migration procedure?
“mappings”: {
“dynamic_templates”: [
{
“details_objects”: {
“match_mapping_type”: “string”,
“match”: “",
“mapping”: {
“type”: “keyword”,
“doc_values”: false,
“index”: false
}
}
},
{
“date_types”: {
“match_mapping_type”: “date”,
“match”: "”,
“mapping”: {
“type”: “date”,
“doc_values”: true,
“index”: false
}
}
},
{
“no_index_values”: {
“match_mapping_type”: “*”,
“mapping”: {
“type”: “{dynamic_type}”,
“doc_values”: false,
“index”: false
}
}
}
],
“properties”: {
“event”: {
“type”: “object”
},
“events”: {
“type”: “object”
}
@pablo I realized that I have a field called event.original (this field created automatically)
and I want to drop it in logstash but it didn’t work
I dropped this field and it worked