# Field 'app.response.abc' not found; typically this occurs with arrays which are not mapped as single value

**URL:** <https://discuss.elastic.co/t/field-app-response-abc-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/246968>\
**Category:** Elasticsearch\
**Tags:** es-hadoop\
**Created:** [August 31, 2020, 2:14pm UTC](https://discuss.elastic.co/t/field-app-response-abc-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/246968 "2020-08-31T14:14:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ayush\_Goyal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_goyal/32/74445_2.png) [@Ayush\_Goyal](https://discuss.elastic.co/u/Ayush_Goyal)\
**Post date:** [August 31, 2020, 2:14pm UTC](https://discuss.elastic.co/t/field-app-response-abc-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/246968/1 "2020-08-31T14:14:15Z")

</div>

I an trying to read elastic index from hadoop but getting below error

` Caused by: org.elasticsearch.hadoop.EsHadoopIllegalStateException: Field 'app.response.abc' not found; typically this occurs with arrays which are not mapped as single value`

Mapping of this particular field is  
`"abc": { "type": "object" }, "gridStatus": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } },`

and I am using below command to read data

```
`df = spark.read.format("org.elasticsearch.spark.sql").option("es.net.http.auth.user", "username") \

        .option("es.net.http.auth.pass", "password") \

        .option("es.net.ssl", "true") \

        .option("es.net.ssl.cert.allow.self.signed", "true") \

        .option("mergeSchema", "true") \

        .option('es.index.auto.create', 'true') \

        .option('es.nodes', 'w.x.y.z")) \

        .option('es.port', '9200') \

        .option('es.batch.write.retry.wait', '100s') \

        .option("es.mapping.date.rich", False) \

        .option("es.read.field.as.array.include" , "app.response.abc") \

        .option("es.mapping.include","app.response.response_id") \

        .option("es.query", '{"query": {"range": {"@timestamp": {"gte": "2020-08-25 01:00:00", "lte": "2020-08-25 01:30:00", "format": "yyyy-MM-dd HH:mm:ss"}}}}') \

        .load("myindex-2020.08.25")`
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 28, 2020, 2:14pm UTC](https://discuss.elastic.co/t/field-app-response-abc-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/246968/2 "2020-09-28T14:14:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.