# Graylog-metrics plugin with elasticsearch **URL:** \ **Category:** Graylog Add-ons\ **Created:** [January 26, 2018, 7:24am UTC](https://community.graylog.org/t/graylog-metrics-plugin-with-elasticsearch/3943 "2018-01-26T07:24:49Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![jtkarvo](https://avatars.discourse-cdn.com/v4/letter/j/43a26b/32.png) [@jtkarvo](https://community.graylog.org/u/jtkarvo)\ **Post date:** [January 26, 2018, 7:24am UTC](https://community.graylog.org/t/graylog-metrics-plugin-with-elasticsearch/3943/1 "2018-01-26T07:24:49Z")
hi, I try to monitor a multi node graylog cluster with graylog metrics plugin’s elasticsearch version. Looking at kibana, it seems that the server name is not present, so I configured each server to send to a different index. I get following errors in the ES side: ``` [2018-01-26T09:09:23,170][DEBUG][o.e.a.b.TransportShardBulkAction] [es-graylog-mon01v] [metrics-gs05-2018-01][2] failed to execute bulk item (index) BulkShardRequest [[metrics-gs05-2018-01][2]] containing [512] reques ts org.elasticsearch.index.mapper.MapperParsingException: failed to parse [value] at org.elasticsearch.index.mapper.FieldMapper.parse(FieldMapper.java:298) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrField(DocumentParser.java:468) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentParser.parseValue(DocumentParser.java:591) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentParser.innerParseObject(DocumentParser.java:396) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentParser.parseObjectOrNested(DocumentParser.java:373) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentParser.internalParseDocument(DocumentParser.java:93) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentParser.parseDocument(DocumentParser.java:66) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.DocumentMapper.parse(DocumentMapper.java:277) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.shard.IndexShard.prepareIndex(IndexShard.java:530) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.shard.IndexShard.prepareIndexOnPrimary(IndexShard.java:507) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.bulk.TransportShardBulkAction.prepareIndexOperationOnPrimary(TransportShardBulkAction.java:458) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.bulk.TransportShardBulkAction.executeIndexRequestOnPrimary(TransportShardBulkAction.java:466) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.bulk.TransportShardBulkAction.executeBulkItemRequest(TransportShardBulkAction.java:146) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:115) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.bulk.TransportShardBulkAction.shardOperationOnPrimary(TransportShardBulkAction.java:70) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$PrimaryShardReference.perform(TransportReplicationAction.java:975) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$PrimaryShardReference.perform(TransportReplicationAction.java:944) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.ReplicationOperation.execute(ReplicationOperation.java:113) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$AsyncPrimaryAction.onResponse(TransportReplicationAction.java:345) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$AsyncPrimaryAction.onResponse(TransportReplicationAction.java:270) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$1.onResponse(TransportReplicationAction.java:924) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$1.onResponse(TransportReplicationAction.java:921) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.shard.IndexShardOperationsLock.acquire(IndexShardOperationsLock.java:151) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.shard.IndexShard.acquirePrimaryOperationLock(IndexShard.java:1659) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction.acquirePrimaryShardReference(TransportReplicationAction.java:933) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction.access$500(TransportReplicationAction.java:92) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$AsyncPrimaryAction.doRun(TransportReplicationAction.java:291) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$PrimaryOperationTransportHandler.messageReceived(TransportReplicationAction.java:266) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.action.support.replication.TransportReplicationAction$PrimaryOperationTransportHandler.messageReceived(TransportReplicationAction.java:248) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:69) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.transport.TransportService$7.doRun(TransportService.java:654) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:638) [elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-5.6.6.jar:5.6.6] at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:1.8.0_151] at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:1.8.0_151] at java.lang.Thread.run(Unknown Source) [?:1.8.0_151] Caused by: java.lang.NumberFormatException: For input string: "2018-01-26T07:08:45.962+0000" at sun.misc.FloatingDecimal.readJavaFormatString(Unknown Source) ~[?:?] at sun.misc.FloatingDecimal.parseDouble(Unknown Source) ~[?:?] at java.lang.Double.parseDouble(Unknown Source) ~[?:1.8.0_151] at org.elasticsearch.common.xcontent.support.AbstractXContentParser.longValue(AbstractXContentParser.java:187) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.NumberFieldMapper$NumberType$7.parse(NumberFieldMapper.java:737) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.NumberFieldMapper$NumberType$7.parse(NumberFieldMapper.java:709) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.NumberFieldMapper.parseCreateField(NumberFieldMapper.java:1072) ~[elasticsearch-5.6.6.jar:5.6.6] at org.elasticsearch.index.mapper.FieldMapper.parse(FieldMapper.java:287) ~[elasticsearch-5.6.6.jar:5.6.6] ... 36 more ``` ES version is 5.6.6. What kind of a custom field mapping is needed to make this work? ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [January 26, 2018, 11:05am UTC](https://community.graylog.org/t/graylog-metrics-plugin-with-elasticsearch/3943/2 "2018-01-26T11:05:01Z")
FWIW, this is the library (metrics reporter) which the Graylog Metrics Reporter for Elasticsearch is using: > **[elastic/elasticsearch-metrics-reporter-java](https://github.com/elastic/elasticsearch-metrics-reporter-java)** > > Metrics reporter, which reports to elasticsearch. Contribute to elastic/elasticsearch-metrics-reporter-java development by creating an account on GitHub. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [February 9, 2018, 11:05am UTC](https://community.graylog.org/t/graylog-metrics-plugin-with-elasticsearch/3943/3 "2018-02-09T11:05:12Z")
Closed on February 9, 2018, 11:05am UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.