Excessive Indexer Failures - Opensearch - Of like kind

In the INdex this message is going to the field ListBaseType is slated as type long but the data from the message you are trying to inject into it is of type string with the word GenericList

When indexes rotate, they refresh field type based on the first message that comes in on a field. SO when that index rotated, the next message had something 222 for the ListBaseType field and OpenSource decided the field will now be a long.

Short/quick fix is to rotate the index and hopefully the next message coming in is the correct string type. Long term you can set a custom mapping to the field to force it to be the correct type (in case all-numerics occasionally happen.

I wrote up how to do it in an older version of ElasticSearch here - that may give you some tips if you want to do a custom mapping - likely slightly different in OpenSearch now.

2 Likes