# Failed to ingest Data to an Index

**URL:** <https://discuss.elastic.co/t/failed-to-ingest-data-to-an-index/319405>\
**Category:** Logstash\
**Created:** [November 21, 2022, 8:58am UTC](https://discuss.elastic.co/t/failed-to-ingest-data-to-an-index/319405 "2022-11-21T08:58:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jecks\_Speed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jecks_speed/32/113221_2.png) [@Jecks\_Speed](https://discuss.elastic.co/u/Jecks_Speed)\
**Post date:** [November 21, 2022, 8:58am UTC](https://discuss.elastic.co/t/failed-to-ingest-data-to-an-index/319405/1 "2022-11-21T08:58:53Z")

</div>

Hi everyone,

Good day! I am newbie to ELK.  
currently i am working a return data of an API. upon checking my target body it has the return data from API call, However after processing these data using mutate and some if condition the data seems like it could not be ingested to an index. whenever I check my index its empty.

```
http {
	verb => "POST"
	url => "http://API URL"
	user => "user"
	password => "testpassword"
	target_body => "testbody"
	request_timeout => 300
	headers => {
		Accept => "application/json"
		"X-Requested-With"	=> "X"
	}
	body_format => "json"
	body =>	'{
		"Id": "ID",
		"Rfcdest": "",
		"Mins": "",
		"Parameter": [{
				"Id": "ID",
				"Fnam": "FNAMData",
				"Fval": "ID",
				"Extval": []
			}, {
				"Id": "ID",
				"Fnam": "FNAMData",
				"Fval": "ID",
				"Extval": []
			}, {
				"Id": "ID",
				"Fnam": "FNAMData",
				"Fval": "%{[fields][record_type]}",
				"Extval": [
					%{payload}
				]
			}
		],
		"Return": [],
		"Data": []
	}'
}

mutate {
	rename => {
		"[testbody][d][Return][results]" => "returnData"
		"[testbody][d][Parameter][results]" => "parameter"
	}
}

if [returnData] and [returnData][0] {	
	if [fields][record_type] == "RETAIL" {
		mutate {
			add_field => {
				"return_ship_date" => "%{[returnData][0][Message]}"
				"return_number" => "%{[returnData][1][Message]}"
				"return_delivery_number" => "%{[returnData][2][Message]}"
				"return_ship_to" => "%{[returnData][3][Message]}"
				"return_sampleNo" => "%{[returnData][4][Message]}"
				"return_confirmation"	=> "%{[returnData][5][Message]}"
			}
		}
	}

	else {
		mutate {
			add_field => {
				"return_ship_date" => "%{[returnData][0][Message]}"
				"return_number" => "%{[returnData][1][Message]}"
				"return_delivery_number" => "%{[returnData][2][Message]}"
				"return_confirmation"	=> "%{[returnData][3][Message]}"
			}
		}
	}
}

```

}

output {  
elasticsearch {  
hosts =\> ["[http://localhost:9200](http://localhost:9200)"]  
index =\> "sampleIndex"  
}

```
stdout {
	codec => rubydebug
}

```

}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 19, 2022, 8:59am UTC](https://discuss.elastic.co/t/failed-to-ingest-data-to-an-index/319405/2 "2022-12-19T08:59:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.