hyytaojunming 发表于 2017-12-27 18:30:15

【Logstash系列】使用Logstash作为收集端采集IIS日志

  ELK日志错误:
, node, , s: Failed to execute lastShard
org.elasticsearch.search.SearchParseException: : from[-1],size[-1]: Parse Failure }}]}}}}}}}},"size":0}]]
      at org.elasticsearch.search.SearchService.parseSource(SearchService.java:681)
      at org.elasticsearch.search.SearchService.createContext(SearchService.java:537)
      at org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:509)
      at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:264)
      at org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:231)
      at org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:228)
      at org.elasticsearch.search.action.SearchServiceTransportAction$23.run(SearchServiceTransportAction.java:559)
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
      at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.ClassCastException: org.elasticsearch.index.fielddata.plain.PagedBytesIndexFieldData cannot be cast to org.elasticsearch.index.fielddata.IndexNumericFieldData
      at org.elasticsearch.search.facet.datehistogram.DateHistogramFacetParser.parse(DateHistogramFacetParser.java:199)
      at org.elasticsearch.search.facet.FacetParseElement.parse(FacetParseElement.java:93)
      at org.elasticsearch.search.SearchService.parseSource(SearchService.java:665)
      ... 9 more
页: [1]
查看完整版本: 【Logstash系列】使用Logstash作为收集端采集IIS日志