No mapping found for [flow.age] in order to sort on

[infiniteproject]

Im getting a lot of ES errors like this while loading reports/flow page:

RemoteTransportException[[Kid Colt][127.0.0.1:9300][indices:data/read/search[phase/query]]]; nested: SearchParseException[failed to parse search source [{"aggs":{"topFlowsByAge":{"top_hits":{"size":10,"sort":[{"flow.age":{"order":"desc"}}]}}},"query":{"bool":{"filter":[{"exists":{"field":"event_type"}},{"term":{"event_type":"flow"}},{"range":{"@timestamp":{"gte":"2016-12-27T15:22:16+01:00"}}}]}},"size":0,"sort":[{"@timestamp":{"order":"desc"}}]}]]; nested: SearchParseException[No mapping found for [flow.age] in order to sort on];

[jasonish]

Does this actually cause a problem with Evebox though?

I think the only way around this would be to create our own mapping, but keeping compatibility with Logstash/Kibana is higher priority right now.

[jasonish]

Fixed with 17a7776