[security_analytics_exception] class java.lang.String cannot be cast to class java.util.Map (java.lang.String and java.util.Map are in module java.base of loader 'bootstrap')

divyansh.pateel · April 16, 2024, 12:56pm

I have made the local setup of Opensearch and Opensearch dashboards. But While I am creating a detector I am getting below error

java.lang.ClassCastException: class java.lang.Integer cannot be cast to class java.util.Map (java.lang.Integer and java.util.Map are in module java.base of lo
ader ‘bootstrap’)
at org.opensearch.core.common.io.stream.StreamInput.readMap(StreamInput.java:683) ~[opensearch-core-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.commons.alerting.model.Monitor.(Monitor.kt:104) ~[?:?]
at org.opensearch.commons.alerting.model.Monitor$Companion.readFrom(Monitor.kt:334) ~[?:?]
at org.opensearch.commons.alerting.action.IndexMonitorRequest.(IndexMonitorRequest.kt:46) ~[?:?]
at org.opensearch.alerting.transport.TransportIndexMonitorAction.doExecute(TransportIndexMonitorAction.kt:130) ~[?:?]
at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT
]
at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) ~[?:?]
at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:216) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT
]
at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) ~[?:?]
at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:216) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT
]
at org.opensearch.action.support.TransportAction.execute(TransportAction.java:188) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.support.TransportAction.execute(TransportAction.java:107) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:110) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:97) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:476) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.commons.alerting.AlertingPluginInterface.indexMonitor(AlertingPluginInterface.kt:55) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction.createMonitorFromQueries(TransportIndexDetectorAction.java:313) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction$AsyncIndexDetectorsAction$9.onResponse(TransportIndexDetectorAction.java:13
85) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction$AsyncIndexDetectorsAction$9.onResponse(TransportIndexDetectorAction.java:13
62) ~[?:?]
at org.opensearch.action.support.TransportAction$1.onResponse(TransportAction.java:113) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.support.TransportAction$1.onResponse(TransportAction.java:107) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$0(TransportSearchAction.java:427) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-
SNAPSHOT]
at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) ~[opensearch-core-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.core.action.ActionListener$5.onResponse(ActionListener.java:268) ~[opensearch-core-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.AbstractSearchAsyncAction.sendSearchResponse(AbstractSearchAsyncAction.java:697) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11
.1-SNAPSHOT]
at org.opensearch.action.search.ExpandSearchPhase.run(ExpandSearchPhase.java:132) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:59) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:446) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNA
PSHOT]
at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:430) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1
-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase.moveToNextPhase(FetchSearchPhase.java:298) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase.lambda$innerRun$1(FetchSearchPhase.java:138) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase.innerRun(FetchSearchPhase.java:150) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase$1.doRun(FetchSearchPhase.java:122) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.threadpool.TaskAwareRunnable.doRun(TaskAwareRunnable.java:78) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:59) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:908) [opensearch-2.11.1-SNAPSHOT.jar
:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) [opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?]
at java.lang.Thread.run(Thread.java:833) [?:?]
[2024-04-16T16:55:29,922][ERROR][o.o.s.u.SecurityAnalyticsException] [VSPL0037] Security Analytics error:
java.lang.ClassCastException: class java.lang.Integer cannot be cast to class java.util.Map (java.lang.Integer and java.util.Map are in module java.base of lo
ader ‘bootstrap’)
at org.opensearch.core.common.io.stream.StreamInput.readMap(StreamInput.java:683) ~[opensearch-core-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.commons.alerting.model.Monitor.(Monitor.kt:104) ~[?:?]
at org.opensearch.commons.alerting.model.Monitor$Companion.readFrom(Monitor.kt:334) ~[?:?]
at org.opensearch.commons.alerting.action.IndexMonitorRequest.(IndexMonitorRequest.kt:46) ~[?:?]
at org.opensearch.alerting.transport.TransportIndexMonitorAction.doExecute(TransportIndexMonitorAction.kt:130) ~[?:?]
at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT
]
at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) ~[?:?]
at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:216) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT
]
at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) ~[?:?]
at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:216) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT
]
at org.opensearch.action.support.TransportAction.execute(TransportAction.java:188) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.support.TransportAction.execute(TransportAction.java:107) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:110) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:97) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:476) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.commons.alerting.AlertingPluginInterface.indexMonitor(AlertingPluginInterface.kt:55) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction.createMonitorFromQueries(TransportIndexDetectorAction.java:313) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction$AsyncIndexDetectorsAction$9.onResponse(TransportIndexDetectorAction.java:13
85) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction$AsyncIndexDetectorsAction$9.onResponse(TransportIndexDetectorAction.java:13
62) ~[?:?]
at org.opensearch.action.support.TransportAction$1.onResponse(TransportAction.java:113) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.support.TransportAction$1.onResponse(TransportAction.java:107) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$0(TransportSearchAction.java:427) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-
SNAPSHOT]
at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) ~[opensearch-core-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.core.action.ActionListener$5.onResponse(ActionListener.java:268) ~[opensearch-core-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.AbstractSearchAsyncAction.sendSearchResponse(AbstractSearchAsyncAction.java:697) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11
.1-SNAPSHOT]
at org.opensearch.action.search.ExpandSearchPhase.run(ExpandSearchPhase.java:132) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:59) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:446) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNA
PSHOT]
at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:430) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1
-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase.moveToNextPhase(FetchSearchPhase.java:298) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase.lambda$innerRun$1(FetchSearchPhase.java:138) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase.innerRun(FetchSearchPhase.java:150) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.search.FetchSearchPhase$1.doRun(FetchSearchPhase.java:122) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.threadpool.TaskAwareRunnable.doRun(TaskAwareRunnable.java:78) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:59) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:908) [opensearch-2.11.1-SNAPSHOT.jar
:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) [opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?]
at java.lang.Thread.run(Thread.java:833) [?:?]
[2024-04-16T16:55:29,965][WARN ][r.suppressed ] [VSPL0037] path: /_plugins/_security_analytics/detectors, params: {}
org.opensearch.securityanalytics.util.SecurityAnalyticsException: class java.lang.Integer cannot be cast to class java.util.Map (java.lang.Integer and java.ut
il.Map are in module java.base of loader ‘bootstrap’)
at org.opensearch.securityanalytics.util.SecurityAnalyticsException.wrap(SecurityAnalyticsException.java:54) ~[?:?]
at org.opensearch.securityanalytics.transport.TransportIndexDetectorAction$AsyncIndexDetectorsAction.lambda$finishHim$0(TransportIndexDetectorAction.j
ava:1474) ~[?:?]
at org.opensearch.action.ActionRunnable.lambda$supply$0(ActionRunnable.java:74) [opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.action.ActionRunnable$2.doRun(ActionRunnable.java:89) ~[opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:908) [opensearch-2.11.1-SNAPSHOT.jar
:2.11.1-SNAPSHOT]
at org.opensearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:52) [opensearch-2.11.1-SNAPSHOT.jar:2.11.1-SNAPSHOT]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?]
at java.lang.Thread.run(Thread.java:833) [?:?]

system · June 15, 2024, 12:56pm

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Exception creating detector Security Analytics	6	592	May 26, 2023
Security Analytics - doesn't work, no rules Security Analytics	2	247	July 7, 2024
Java Client not working for OpenSearch document insert OpenSearch troubleshoot	1	389	June 18, 2024
Mapper [type] cannot be changed from type [text] to [keyword] Alerting troubleshoot	10	4944	March 7, 2023
Cannot setup threat intelligence detector OpenSearch Dashboards troubleshoot	0	23	September 11, 2024

[security_analytics_exception] class java.lang.String cannot be cast to class java.util.Map (java.lang.String and java.util.Map are in module java.base of loader 'bootstrap')

Related topics