Skip to content

Commit

Permalink
Change the default _type to be _doc
Browse files Browse the repository at this point in the history
In order to be compatible with the new versions of ElasticSearch which effectively are getting rid of
_type, we should change the default type to be "_doc"

As per the ElasticSearch forum discussion at:

https://discuss.elastic.co/t/7-0-1-template-with-geo-point-geoip-processor-in-pipeline-bulk-crash/182039/3

this seems to be due to not specifying a _type when creating the mapping, at which point it defaults
to "_doc".

Later when performing a bulk operation (indexing) we specifying that _type is "flb_type" which then
causes the error to be thrown about multiple types not being allowed:

"Rejecting mapping update to [logs-2019.11.16] as the final mapping would have more than 1 type: [_doc, flb_type]"

Another possible solution to this issue might be to use the "flb_type" when creating the index (and mappings)
initially, however I'm not sure whether this type is being used for anything (we are not filtering or querying
based on it).

Issue(s): fluent#1359

Signed-off-by: Srdan Dukic <[email protected]>
  • Loading branch information
Serge Dukic committed Nov 19, 2019
1 parent 5bf04fe commit c0876ec
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion plugins/out_es/es.h
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
#define FLB_ES_DEFAULT_HOST "127.0.0.1"
#define FLB_ES_DEFAULT_PORT 92000
#define FLB_ES_DEFAULT_INDEX "fluent-bit"
#define FLB_ES_DEFAULT_TYPE "flb_type"
#define FLB_ES_DEFAULT_TYPE "_doc"
#define FLB_ES_DEFAULT_PREFIX "logstash"
#define FLB_ES_DEFAULT_TIME_FMT "%Y.%m.%d"
#define FLB_ES_DEFAULT_TIME_KEY "@timestamp"
Expand Down

1 comment on commit c0876ec

@jederfreitas
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it already available for use?

Please sign in to comment.