Data Tap Output has ""ULONG_MAX":18446744073709552000," which causes Elastic Search Ingest to fail.

[lhasadreams]

Data Tap Output has ""ULONG_MAX":18446744073709552000," which causes Elastic Search Ingest from LogStash to fail with:

Preview of field's value: 
'18446744073709552000'", "caused_by"=>{"type"=>"json_parse_exception", "reason"=>"Numeric value (18446744073709552000) out of range of long (-9223372036854775808 - 9223372036854775807)\n

It appears that Elasticsearch supported data types do not cover ulong, long being the largest - https://www.elastic.co/guide/en/elasticsearch/reference/current/number.html

Ohai 16.0.20

RHEL 7.5

Chef-client 16.0.275

data.json.zip (Line 3535)

One possible solution is to make the output a string rather than an integer. Another is to use a Logstash filter to change the fields type or remove it completely - not sure if the Ohai Attribute output is at fault here or the capabilities of Elasticsearch to ingest a ulong.