Hi Jochen,
I rotated the indexes in (System/Indices/Index Set/Maintenance) using rotate active index option. Set the statement to use the lookup_value in the function and get the same errors on the new rotated index
a minute ago graylog_1 2b9ced70-f7b7-11e7-b971-06d71caf9804 {“type”:“mapper_parsing_exception”,“reason”:“object mapping for [CommandCategory] tried to parse field [CommandCategory] as object, but found a concrete value”}
Index is now graylog_1.
Looks like that does not work unless I have done something incorrectly.
Jake