You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
On May 2, 2025 a known issue was discovered that the `.fleet-agents` index template was missing a mapping for the `local_metadata.complete` attribute. This may cause agent checkins to be rejected and the agents to appear as offline.
640
+
641
+
In this {fleet}'s logs this will appear as:
642
+
[source,shell]
643
+
----
644
+
elastic fail 400: document_parsing_exception: [1:209] object mapping for [local_metadata] tried to parse field [local_metadata] as object, but found a concrete value
645
+
Eat bulk checkin error; Keep on truckin'
646
+
----
647
+
And in the {agent} logs it will appear as:
648
+
[source,shell]
649
+
----
650
+
"log.level":"error","@timestamp":"2025-04-22:12:35:25.295Z","message":"Eat bulk checkin error; Keep on truckin'","component":{"binary":"fleet-server","dataset":"elastic_agent.fleet_server","id":"fleet-server-es-containerhost","type":"fleet-server"},"log":{"source":"fleet-server-es-containerhost"},"service.type":"fleet-server","error.message":"elastic fail 400: document_parsing_exception: [1:209] object mapping for [local_metadata] tried to parse field [local_metadata] as object, but found a concrete value","ecs.version":"1.6.0","service.name":"fleet-server","ecs.version":"1.6.0"
651
+
----
652
+
This attribute was added to the template in versions: 8.17.11 8.18.3, and 8.19.3.
653
+
654
+
Further investigation revealed that the `.fleet-agents` index template was not correctly applied due to an unchanged `_meta.managed_index_mappings_version` number.
655
+
This change also affects other attributes as well, such as `upgrade_attempts`, `namespaces`, `unprivileged`, and `unhealthy_reason`.
656
+
If there is an error related to any of these attributes, there will be a similar error message in the logs.
657
+
658
+
*Impact* +
659
+
660
+
Updating to a version with a fixed `_meta.managed_index_mappings_version` will correctly apply the new index template.
661
+
The fixed versions are 8.18.8, 8.19.4, 9.0.8, 9.1.4.
0 commit comments