# Indexer failure

**URL:** <https://community.graylog.org/t/indexer-failure/32330>\
**Category:** Graylog Central (peer support)\
**Created:** [May 8, 2024, 2:09am UTC](https://community.graylog.org/t/indexer-failure/32330 "2024-05-08T02:09:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RyanInsolencee](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/ryaninsolencee/32/15875_2.png) [@RyanInsolencee](https://community.graylog.org/u/RyanInsolencee)\
**Post date:** [May 8, 2024, 2:09am UTC](https://community.graylog.org/t/indexer-failure/32330/1 "2024-05-08T02:09:20Z")

</div>

**1. Describe your incident:**  
failed indexing attempts

**2. Describe your environment:**

- OS Information:  
ubuntu 22.04
- Package Version:  
graylog 5.x
- Service logs, configurations, and environment variables:

```auto
OpenSearchException[OpenSearch exception [type=mapper_parsing_exception, reason=failed to parse field [data_win_eventdata_processCreationTime] of type [date] in document with id '885fc8f3-0cd9-11ef-b0e7-6ad7c5bf06bb'. Preview of field's value: '0x1daa0e631450c9e']]; nested: OpenSearchException[OpenSearch exception [type=illegal_argument_exception, reason=failed to parse date field [0x1daa0e631450c9e] with format [strict_date_optional_time||epoch_millis]]]; nested: OpenSearchException[OpenSearch exception [type=date_time_parse_exception, reason=date_time_parse_exception: Failed to parse with all enclosed parsers]];

```

**3. What steps have you already taken to try and solve the problem?**  
NIL

**4. How can the community help?**

how do i resolve this issue

---

<div class="post-metadata">

**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\
**Post date:** [May 8, 2024, 10:43am UTC](https://community.graylog.org/t/indexer-failure/32330/2 "2024-05-08T10:43:19Z")

</div>

So something is wrong in your parsing, you have a field that normally is a date, but the value being sent to opensearch is 0x1daa0e631450c9e which is not a date. You will need to figure out what that value is ending up in that field. Otherwise you can manually set that field to be a string, but then it wont act like a date anymore, which probably isnt ideal.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 22, 2024, 10:43am UTC](https://community.graylog.org/t/indexer-failure/32330/3 "2024-05-22T10:43:33Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.