elastalert-create-index problem

[PawelSmierciak]

Hello!
I just upgraded wazuh and opensearch to v 4.11.2 - reinstalled the server with elastalert2 and unfortunately when calling

(elastalert-env) root@monitor:~/elastalert-config# elastalert-create-index

I get the following error - maybe someone has encountered this before ?

WARNING:elasticsearch:PUT https://IP_ADDRESS:9200/elastalert_status/_doc/_mapping?include_type_name=true [status:400 request:0.003s]
Traceback (most recent call last):
File "/root/elastalert-env/bin/elastalert-create-index", line 8, in
sys.exit(main())
^^^^^^
File "/root/elastalert-env/lib/python3.11/site-packages/elastalert/create_index.py", line 242, in main
create_index_mappings(es_client=es, ea_index=index, recreate=args.recreate, old_ea_index=old_index)
File "/root/elastalert-env/lib/python3.11/site-packages/elastalert/create_index.py", line 78, in create_index_mappings
es_client.indices.put_mapping(index=ea_index, doc_type='_doc',
File "/root/elastalert-env/lib/python3.11/site-packages/elasticsearch/client/utils.py", line 152, in _wrapped
return func(*args, params=params, headers=headers, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/root/elastalert-env/lib/python3.11/site-packages/elasticsearch/client/indices.py", line 408, in put_mapping
return self.transport.perform_request(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/root/elastalert-env/lib/python3.11/site-packages/elasticsearch/transport.py", line 392, in perform_request
raise e
File "/root/elastalert-env/lib/python3.11/site-packages/elasticsearch/transport.py", line 358, in perform_request
status, headers_response, data = connection.perform_request(
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/root/elastalert-env/lib/python3.11/site-packages/elasticsearch/connection/http_requests.py", line 199, in perform_request
self._raise_error(response.status_code, raw_data)
File "/root/elastalert-env/lib/python3.11/site-packages/elasticsearch/connection/base.py", line 315, in _raise_error
raise HTTP_EXCEPTIONS.get(status_code, TransportError)(
elasticsearch.exceptions.RequestError: RequestError(400, 'illegal_argument_exception', 'request [/elastalert_status/_doc/_mapping] contains unrecognized parameter: [include_type_name]')

[jertel]

Here's a similar discussion: #1507

[PawelSmierciak]

thanks - since this is a fresh installation of opensearch from wazuh I will try to contact their support