拥有一个可与Elasticsearch 5.6一起使用的 flex docker镜像(https://hub.docker.com/r/ivankrizsan/elastalert/)，并使用ElasticSearch 6.1更改为测试环境(无索引)，现在获取
Creating Elastalert index in Elasticsearch...
Traceback (most recent call last):
File "/usr/bin/elastalert-create-index", line 11, in <module>
load_entry_point('elastalert', 'console_scripts', 'elastalert-create-index')()
File "/opt/elastalert/elastalert/create_index.py", line 153, in main
es.indices.put_mapping(index=index, doc_type='elastalert', body=es_mapping)
File "build/bdist.linux-x86_64/egg/elasticsearch/client/utils.py", line 73, in _wrapped
File "build/bdist.linux-x86_64/egg/elasticsearch/client/indices.py", line 282, in put_mapping
File "build/bdist.linux-x86_64/egg/elasticsearch/transport.py", line 312, in perform_request
File "build/bdist.linux-x86_64/egg/elasticsearch/connection/http_requests.py", line 90, in perform_request
File "build/bdist.linux-x86_64/egg/elasticsearch/connection/base.py", line 125, in _raise_error
elasticsearch.exceptions.RequestError: TransportError(400, u'mapper_parsing_exception', u'No handler for type [string] declared on field [aggregate_id]')
最佳答案
到目前为止，elastalert不支持开箱即用的elasticsearch 6.0。这是github上的未解决问题:https://github.com/Yelp/elastalert/issues/1399跟踪问题。在https://github.com/Yelp/elastalert/pull/1426中还提到了漫游。
关于elasticsearch - elastalert是否可与ElasticSearch 6一起使用，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/47888212/