# An error occurred during rule execution: message: "Parse Error: Header overflow"

**URL:** <https://discuss.elastic.co/t/an-error-occurred-during-rule-execution-message-parse-error-header-overflow/330017>\
**Category:** Elastic Security\
**Created:** [April 14, 2023, 1:46pm UTC](https://discuss.elastic.co/t/an-error-occurred-during-rule-execution-message-parse-error-header-overflow/330017 "2023-04-14T13:46:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kmz161](https://avatars.discourse-cdn.com/v4/letter/k/838e76/32.png) [@kmz161](https://discuss.elastic.co/u/kmz161)\
**Post date:** [April 14, 2023, 1:46pm UTC](https://discuss.elastic.co/t/an-error-occurred-during-rule-execution-message-parse-error-header-overflow/330017/1 "2023-04-14T13:46:16Z")

</div>

Hello!  
I have problem with Security Rules. This issue only affects the Threshold rules

How can I fix issue?  
P.S. Elastic 7.17

 ![Снимок экрана 2023-04-14 в 16.44.52](https://us1.discourse-cdn.com/elastic/original/3X/e/c/ecfa6182cd26d2d2706b804ead167efd30e8857d.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 12, 2023, 1:46pm UTC](https://discuss.elastic.co/t/an-error-occurred-during-rule-execution-message-parse-error-header-overflow/330017/2 "2023-05-12T13:46:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![Marshall\_Main](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marshall_main/32/77883_2.png) [@Marshall\_Main](https://discuss.elastic.co/u/Marshall_Main)\
**Post date:** [May 12, 2023, 4:23pm UTC](https://discuss.elastic.co/t/an-error-occurred-during-rule-execution-message-parse-error-header-overflow/330017/3 "2023-05-12T16:23:03Z")

</div>

Hi @kmz161, can you provide more details that might help us understand and reproduce the error you're encountering?

- Are you on Elastic Cloud or self-managed?
- Does this happen for all threshold rules?
- For rules where this happens, does the error occur on every rule execution or just some executions?
- Can you provide the JSON export of a rule that encounters this failure?

Thanks,  
Marshall