Getting mapper_parsing_exception

Graylog Central (peer support)
1

Hi All,

From recent two days I am getting this error in my logs. Please help me to fix this.

There were 535 failed indexing attempts in last 24 hours This number is still increasing.

Graylog version - 2.4.6
ES Version - 5.6

2018-10-05T12:08:51.901Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:08:53.846Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6c52e930-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:53.846Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6c9f3470-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:53.846Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6ceb58a1-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:53.846Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6d37caf1-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:53.847Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:08:57.836Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6d859cd2-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:57.836Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6dd06170-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:57.836Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6e1cacb2-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:57.836Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6e786140-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:57.836Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:08:58.039Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6eb54331-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:58.039Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6f01b580-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:58.039Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6f5d1bf0-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:58.039Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6fa96730-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:58.039Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:08:59.820Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<6ff5b273-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:59.821Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<70513ff0-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:59.821Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<709d8b30-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:59.821Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<70e9d670-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:08:59.821Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:09:01.913Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<713648c0-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:01.913Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<71826cf0-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:01.913Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<71ddfa70-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:01.913Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<722a45b0-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:01.913Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:09:03.831Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<727690f3-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:03.831Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<72c30340-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:03.832Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<72ffe530-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:03.832Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<735bc0d0-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:03.832Z ERROR [Messages] Failed to index [4] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:09:05.839Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<73a7bdf1-c897-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"TLSv1\""}}>
2018-10-05T12:09:05.839Z ERROR [Messages] Failed to index [1] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:26:54.852Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<f19efc80-c899-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"Layer4\""}}>
2018-10-05T12:26:54.852Z ERROR [Messages] Failed to index [1] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:26:56.836Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<f2ecd943-c899-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"available!\""}}>
2018-10-05T12:26:56.836Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<f2ecd942-c899-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"Layer4\""}}>
2018-10-05T12:26:56.837Z ERROR [Messages] Failed to index [2] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:27:18.916Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<ffec0710-c899-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"Layer4\""}}>
2018-10-05T12:27:18.916Z ERROR [Messages] Failed to index [1] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
2018-10-05T12:27:20.882Z WARN  [Messages] Failed to index message: index=<infralogs_65> id=<013af540-c89a-11e8-b5cf-1281ecfe7e70> error=<{"type":"mapper_parsing_exception","reason":"failed to parse [ha_response_code]","caused_by":{"type":"number_format_exception","reason":"For input string: \"Layer4\""}}>
2018-10-05T12:27:20.882Z ERROR [Messages] Failed to index [1] messages. Please check the index error log in your web interface for the reason. Error: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.

00%20PM
Screen Shot 2018-10-05 at 6.09.00 PM.png1038×877 183 KB

Thanks

2

the messages have a string ( TLSv1 ) in a field ( ha_response_code ) that is set to type number.

Two options - fix the extraction/ingest that the field only contains numbers or force this field to be a string with a custom index mapping. But lose the ability to make searches that are only possible with numbers ( like < 200) ´.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.