# Error split was expecting field to be an array

**URL:** <https://discuss.elastic.co/t/error-split-was-expecting-field-to-be-an-array/325285>\
**Category:** Elastic Agent\
**Created:** [February 10, 2023, 5:09pm UTC](https://discuss.elastic.co/t/error-split-was-expecting-field-to-be-an-array/325285 "2023-02-10T17:09:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fabien9402](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabien9402/32/116740_2.png) [@fabien9402](https://discuss.elastic.co/u/fabien9402)\
**Post date:** [February 10, 2023, 5:09pm UTC](https://discuss.elastic.co/t/error-split-was-expecting-field-to-be-an-array/325285/1 "2023-02-10T17:09:45Z")

</div>

Hello,

We have an error in one of our elastic-agent.

This returns the error below:

```auto
Feb 7, 2023
15:01:20.773
elastic_agent.filebeat
[elastic_agent.filebeat][error] error processing response: split was expecting field to be an array
Feb 8, 2023
15:01:19.772
elastic_agent.filebeat
[elastic_agent.filebeat][error] error processing response: split was expecting field to be an array
Feb 9, 2023
15:01:19.781
elastic_agent.filebeat
[elastic_agent.filebeat][error] error processing response: split was expecting field to be an array
Feb 10, 2023
15:01:19.783
elastic_agent.filebeat
[elastic_agent.filebeat][error] error processing response: split was expecting field to be an array

```

This elastic-agent is containerized and is the only one giving us this error (about twenty other agents work perfectly).

We did not find solutions in the documentation and on this forum.

We thank you in advance for the help you will be able to bring to our request.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 10, 2023, 5:10pm UTC](https://discuss.elastic.co/t/error-split-was-expecting-field-to-be-an-array/325285/2 "2023-03-10T17:10:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.