背景：ES前端日志插入不了，查看logstash插入ES日志报错 Could not index event to Elasticsearch. ECS compatibility is enabled but target option was not specified. This may cause fields to be set at the top-level of the event where they are likely to clash with the Elastic Common Schema. It is recommended to set the target option to avoid potential schema conflicts (if your data is ECS compliant or non-conflicting, feel free to ignore this message最后找到问题解决的报错是这个原因Could not index event to Elasticsearch object mapping for [source] tried to parse field [source] as object, but found a concrete valuesource字段跟已进数据格式有冲突，同一个索引就插入不了，logstash配置把新日志改到新索引。