ElasticSearch：'x_content_parse_exception' [template]未知字段[lifecycle]

bogh5gae 于 8个月前发布在 ElasticSearch

关注(0)|答案(1)|浏览(92)

我从deviantony/docker-elk版本8.9部署了elk堆栈。
我正在尝试为我的数据流创建生命周期和保留策略，如official documentetion中所述

PUT _index_template/my-index-template
{
  "index_patterns": ["my-data-stream*"],
  "data_stream": { },
  "priority": 500,
  "template": {
    "lifecycle": {
      "data_retention": "7d"
    }
  },
  "_meta": {
    "description": "Template with data stream lifecycle"
  }
}

但我得到了错误

{
  "error": {
    "root_cause": [
      {
        "type": "x_content_parse_exception",
        "reason": "[6:5] [template] unknown field [lifecycle]"
      }
    ],
    "type": "x_content_parse_exception",
    "reason": "[6:18] [index_template] failed to parse field [template]",
    "caused_by": {
      "type": "x_content_parse_exception",
      "reason": "[6:5] [template] unknown field [lifecycle]"
    }
  },
  "status": 400
}

有什么想法吗？

elasticsearch

来源：https://stackoverflow.com/questions/76822803/elasticsearch-x-content-parse-exception-template-unknown-field-lifecycle