You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"query": """FROM my-datastream::failures | DROP error.stack_trace | LIMIT 1""" <1>
313
313
}
314
314
----
315
315
<1> We drop the `error.stack_trace` field here just to keep the example free of newlines.
@@ -461,14 +461,14 @@ PUT _ingest/pipeline/my-datastream-example-pipeline
461
461
{
462
462
"processors": [
463
463
{
464
-
"set": { // <1>
464
+
"set": { <1>
465
465
"override": false,
466
466
"field": "@timestamp",
467
467
"copy_from": "_ingest.timestamp"
468
468
}
469
469
},
470
470
{
471
-
"set": { // <2>
471
+
"set": { <2>
472
472
"field": "published",
473
473
"copy_from": "data"
474
474
}
@@ -564,15 +564,15 @@ GET my-datastream-ingest::failures/_search
564
564
"_score": 1,
565
565
"_source": {
566
566
"@timestamp": "2025-05-09T20:31:13.759Z",
567
-
"document": { // <1>
567
+
"document": { <1>
568
568
"index": "my-datastream-ingest",
569
569
"source": {
570
570
"random": 42
571
571
}
572
572
},
573
573
"error": {
574
574
"type": "illegal_argument_exception",
575
-
"message": "field [data] not present as part of path [data]", // <2>
575
+
"message": "field [data] not present as part of path [data]", <2>
576
576
"stack_trace": """j.l.IllegalArgumentException: field [data] not present as part of path [data]
577
577
at o.e.i.IngestDocument.getFieldValue(IngestDocument.java:202)
578
578
at o.e.i.c.SetProcessor.execute(SetProcessor.java:86)
@@ -601,7 +601,7 @@ Building on the example above, we send a document that has a text value where we
601
601
----
602
602
POST my-datastream-ingest/_doc
603
603
{
604
-
"data": "this field is invalid" // <1>
604
+
"data": "this field is invalid" <1>
605
605
}
606
606
----
607
607
<1> The mappings above expect this field to have been a numeric value.
@@ -620,7 +620,7 @@ POST my-datastream-ingest/_doc
620
620
},
621
621
"_seq_no": 0,
622
622
"_primary_term": 1,
623
-
"failure_store": "used" // <1>
623
+
"failure_store": "used" <1>
624
624
}
625
625
----
626
626
<1> The document failed and was sent to the failure store.
@@ -655,7 +655,7 @@ GET my-datastream-ingest::failures/_search
655
655
"_score": 1,
656
656
"_source": {
657
657
"@timestamp": "2025-05-09T20:55:38.943Z",
658
-
"document": { // <1>
658
+
"document": { <1>
659
659
"id": "sHTVtpYBwrYNjPmaEdB5",
660
660
"index": "my-datastream-ingest",
661
661
"source": {
@@ -665,7 +665,7 @@ GET my-datastream-ingest::failures/_search
665
665
}
666
666
},
667
667
"error": {
668
-
"type": "document_parsing_exception", // <2>
668
+
"type": "document_parsing_exception", <2>
669
669
"message": "[1:91] failed to parse field [published] of type [long] in document with id 'sHTVtpYBwrYNjPmaEdB5'. Preview of field's value: 'this field is invalid'",
670
670
"stack_trace": """o.e.i.m.DocumentParsingException: [1:91] failed to parse field [published] of type [long] in document with id 'sHTVtpYBwrYNjPmaEdB5'. Preview of field's value: 'this field is invalid'
671
671
at o.e.i.m.FieldMapper.rethrowAsDocumentParsingException(FieldMapper.java:241)
@@ -761,20 +761,20 @@ GET _data_stream/my-datastream
0 commit comments