"java.lang/Long cannot be cast to org.apache.lucene.util.BytesRef" when upgrading from 3.x to 5.x

When upgrading from a previous release of Interset to Interset 5.x, you may encounter the above error in Kibana (noted in the developer console) when attempting to perform a search on any period where data does not exist. This may also occur if doing a manual restore of Endpoint data using

This is due to a known issue in Kibana -

The workaround is to perform the following steps in Kibana:

  1. Click on Settings
  2. Click on Advanced
  3. Change the value for sort:options from { "unmapped_type": "boolean" } to { "unmapped_type": "date" }
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request