filebeat creates mapping explosion with field monitoring.metrics.filebeat.harvester.files #19745
Labels
bug
Filebeat
Filebeat
impact:high
Short-term priority; add to current release, or definitely next.
Team:Services
(Deprecated) Label for the former Integrations-Services team
v7.6.0
With PR #13395 for Filebeat 7.6.0, filebeat added a few new metrics to troubleshoot harvesters. This new feaature can cause a mapping a mapping explosion when the data is loaded into a time series index.
To resolve this issue, use the drop processor to drop monitoring.metrics.filebeat.harvester.files
Example of mapping explosion.
Kibana may also experience an issue when trying to refresh the mapping and requires a restart. The error message seen in kibana is:
The text was updated successfully, but these errors were encountered: