# Error "failed to update state in the registry"

**URL:** <https://discuss.elastic.co/t/error-failed-to-update-state-in-the-registry/289002>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 11, 2021, 3:12pm UTC](https://discuss.elastic.co/t/error-failed-to-update-state-in-the-registry/289002 "2021-11-11T15:12:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vladislav](https://avatars.discourse-cdn.com/v4/letter/v/bbce88/32.png) [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Post date:** [November 11, 2021, 3:12pm UTC](https://discuss.elastic.co/t/error-failed-to-update-state-in-the-registry/289002/1 "2021-11-11T15:12:36Z")

</div>

Hello!

I have a strange error using httpjson-input plugin in filebeat. Everything works fine, I was getting data updates via cursor until now. Now in logs everytime request finished with \> 0 events published I get an error:  
`Nov 11 18:04:31 sdg-logstash.test filebeat[14729]: 2021-11-11T18:04:31.167+0300 ERROR [input] input-cursor/publish.go:147 Failed to update state in the registry for 'httpjson::https://test.zone/api/data?cursor=123129_12374849' {"input_type": "httpjson"}`

my .yml file:

```auto
- type: httpjson
  config_version: 2
  interval: 1m
  request.url: https://test.zone/api/data?cursor=123129_12374849
  request.method: GET
  cursor:
    last_execution_update:
      value: '[[.last_response.body.next_cursor]]'
  request.transforms:
    - set:
        target: url.params.cursor
        value: '[[.cursor.last_execution_update]]'

```

---

<div class="post-metadata">

**Author:** ![Marius\_Iversen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_iversen/32/68988_2.png) [@Marius\_Iversen](https://discuss.elastic.co/u/Marius_Iversen)\
**Post date:** [November 11, 2021, 5:21pm UTC](https://discuss.elastic.co/t/error-failed-to-update-state-in-the-registry/289002/2 "2021-11-11T17:21:52Z")

</div>

Most likely this is because it does not have access to write to the cursor, maybe another software has it open already, or for some reason it has lost permissions to it.

Registry files are usually stored in /var/lib/filebeat/\* by default, so maybe you can check the ownership of that?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 9, 2021, 7:22pm UTC](https://discuss.elastic.co/t/error-failed-to-update-state-in-the-registry/289002/3 "2021-12-09T19:22:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
