SigmaUI
SigmaUI copied to clipboard
Couldn't create template properly
Got this error after running import_es_index.py:
/home/ubuntu# python2 ./ELK_import_export/import_es_index.py
{u'acknowledged': True}
1 / 281 UZ3knmUBtApo-eN_puWZ
Traceback (most recent call last):
File "./ELK_import_export/import_es_index.py", line 39, in <module>
import_index(SIGMA_DOC_INDEX_NAME+'_index.json', SIGMA_DOC_INDEX_NAME)
File "./ELK_import_export/import_es_index.py", line 31, in import_index
es_dbc.insert_doc(index_name, doc_id, doc)
File "/home/ubuntu/ELK_import_export/es_db_connector.py", line 54, in insert_doc
res = self.es.index(index=index, doc_type=index, id=doc_id, body=doc)
File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/utils.py", line 301, in _wrapped
return func(*args, params=params, headers=headers, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/__init__.py", line 410, in index
body=body,
File "/usr/local/lib/python2.7/dist-packages/elasticsearch/transport.py", line 458, in perform_request
raise e
elasticsearch.exceptions.RequestError: RequestError(400, u'illegal_argument_exception', u'Rejecting mapping update to [sui_sigma_doc] as the final mapping would have more than 1 type: [_doc, sui_sigma_doc]')