# HTTP Poller \[API\] input in Logstash - Does it support "Request\_data" on top of "Headers"?

**URL:** <https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327>\
**Category:** Logstash\
**Created:** [October 11, 2022, 12:23pm UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327 "2022-10-11T12:23:53Z")\
**Posts on this page:** 16\
**Page:** 2

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 14, 2022, 6:08am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/21 "2022-10-14T06:08:48Z")

</div>

Thanks, Leandro for your input!  
I have shared the output and conf file below.

I just wanted to flatten the [0],[1], [2], [3], [4]

```auto
input {
  http_poller {
    urls => {
		  ussite => {
		    method => "POST"
		    url => "XXXXX"
		    headers => {
			    "x-xdr-auth-id" => "9"
			    "Authorization" => "XXXXXXX}
		    body => '{ "request_data":{} }'
		  }
    }
    tags => "us_site"
    request_timeout => 30
    schedule => {cron => "* * * * * UTC"}
  }
}
filter{
		split { field => "[reply][alerts]" }
		mutate {
	    add_field => { 
	      "agent.ip" => "%{[reply][alerts][host_ip][0]"
					   "event.action" => "%{[reply][alerts][action]}"
					   "event.id" => "%{[reply][alerts][alert_id]}"
					   "host.ip" => "%{[reply][alerts][host_ip]}"
					   "host.name" => "%{[reply][alerts][host_name]}"
					   "host.os.sub_type" => "%{[reply][alerts][action]}"
					   "host.os.type" => "%{[reply][alerts][action]}"     
	    }
    
    remove_field => ["[reply][alerts]" ]
  }   
}
output {
	....
}

```

Error from Logstash

```auto
docker-elk-logstash-1 | java.lang.OutOfMemoryError: Java heap space
docker-elk-logstash-1 | Dumping heap to java_pid1.hprof ...
docker-elk-logstash-1 | Heap dump file created [298260349 bytes in 1.188 secs]
docker-elk-logstash-1 | [2022-10-14T06:07:16,153][FATAL][org.logstash.Logstash][main] uncaught error (in thread [main]>worker2)
docker-elk-logstash-1 | java.lang.OutOfMemoryError: Java heap space
docker-elk-logstash-1 | at java.nio.HeapCharBuffer.<init>(java/nio/HeapCharBuffer.java:64) ~[?:?]
docker-elk-logstash-1 | at java.nio.CharBuffer.allocate(java/nio/CharBuffer.java:363) ~[?:?]
docker-elk-logstash-1 | at java.nio.charset.CharsetDecoder.decode(java/nio/charset/CharsetDecoder.java:799) ~[?:?]
docker-elk-logstash-1 | at java.nio.charset.Charset.decode(java/nio/charset/Charset.java:814) ~[?:?]
docker-elk-logstash-1 | at org.jruby.RubyEncoding.decodeUTF8(org/jruby/RubyEncoding.java:308) ~[jruby.jar:?]
docker-elk-logstash-1 | at org.jruby.RubyString.decodeString(org/jruby/RubyString.java:814) ~[jruby.jar:?]
docker-elk-logstash-1 | at org.jruby.RubyString.toString(org/jruby/RubyString.java:805) ~[jruby.jar:?]
docker-elk-logstash-1 | at org.jruby.RubyString.asJavaString(org/jruby/RubyString.java:1353) ~[jruby.jar:?]
docker-elk-logstash-1 | at org.logstash.ObjectMappers$RubyStringSerializer.serialize(org/logstash/ObjectMappers.java:140) ~[logstash-core.jar:?]
docker-elk-logstash-1 | at org.logstash.ObjectMappers$RubyStringSerializer.serialize(org/logstash/ObjectMappers.java:128) ~[logstash-core.jar:?]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:808) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:764) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:720) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:35) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:808) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:764) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:720) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(com/fasterxml/jackson/databind/ser/std/MapSerializer.java:35) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider._serialize(com/fasterxml/jackson/databind/ser/DefaultSerializerProvider.java:480) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider.serializeValue(com/fasterxml/jackson/databind/ser/DefaultSerializerProvider.java:319) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ObjectMapper._writeValueAndClose(com/fasterxml/jackson/databind/ObjectMapper.java:4568) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at com.fasterxml.jackson.databind.ObjectMapper.writeValueAsString(com/fasterxml/jackson/databind/ObjectMapper.java:3821) ~[jackson-databind-2.13.3.jar:2.13.3]
docker-elk-logstash-1 | at org.logstash.Event.toJson(org/logstash/Event.java:251) ~[logstash-core.jar:?]
docker-elk-logstash-1 | at org.logstash.ext.JrubyEventExtLibrary$RubyEvent.ruby_to_json(org/logstash/ext/JrubyEventExtLibrary.java:239) ~[logstash-core.jar:?]

```

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [October 14, 2022, 6:24am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/22 "2022-10-14T06:24:28Z")

</div>

Use ruby debug mode in output. It seems either you getting too much data or you are doing something wrong in the transformation logic.

```auto
    stdout {
        codec => rubydebug{ metadata => true}
    }

```

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 14, 2022, 7:09am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/23 "2022-10-14T07:09:35Z")

</div>

> [@Rios](#):
>
> `metadata => true`

Looking at the amount of data stored under one object, if i flatten [0],[1], [2], [3], [4] this could potential create huge load of data causing overflow?

Still exploring Is there any other workaround for this.

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 14, 2022, 7:47am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/24 "2022-10-14T07:47:07Z")

</div>

Anyone know the difference between the use of "http" and "http poller" plugin? in my situation, which should i use?

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [October 14, 2022, 9:03am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/25 "2022-10-14T09:03:55Z")

</div>

> [@Roger\_Huang](#):
>
> Looking at the amount of data stored under one object, if i flatten [0],[1], [2], [3], [4] this could potential create huge load of data causing overflow?
> 
> Still exploring Is there any other workaround for this.

4 fields transformed and in total around 50-100 fields it's not much.  
LS is working like a pipeline, receive data per event, transform, send to ES.

Add ID on http\_poll, and check execution time.

```auto
input {
  http_poller {
    urls => {
		  ussite => {
		    method => "POST"
		    url => "XXXXX"
		    headers => {
			    "x-xdr-auth-id" => "9"
			    "Authorization" => "XXXXXXX}
		    body => '{ "request_data":{} }'
		  }
    }
    tags => "us_site"
    request_timeout => 30
    schedule => {cron => "* * * * * UTC"}
    id => "http_pa"
  }
}

```

[http://localhost:9600/\_node/stats/pipelines?pretty](http://localhost:9600/_node/stats/pipelines?pretty)

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 14, 2022, 9:22am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/26 "2022-10-14T09:22:21Z")

</div>

![Screenshot 2022-10-14 at 5.15.37 PM](https://us1.discourse-cdn.com/elastic/original/3X/0/7/07524c999e73e343a9a1ceb55286c8cf72976373.png)  
Still cannot get pass this parsing. There will always be only 1 hits with latest timestamp after it fetch. I have removed entire "filter" section for debugging  
How do i get the nested in red into records in Kibana?

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [October 14, 2022, 1:25pm UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/27 "2022-10-14T13:25:16Z")

</div>

If is possible, copy here event.original as text, and remove classified info.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [October 14, 2022, 1:45pm UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/28 "2022-10-14T13:45:50Z")

</div>

You need to share the output of the http request you are making, share the content of the `event.original` field.

Have you tried to split on `[reply][alerts]` as I explained in the previous answer?

You have a response where you have multiple alerts in the `reply.alerts` field, it is on this field that you need to apply the `split` field.

```auto
filter {
    split {
        field => "[reply][alerts]"
    }
}

```

You can't rely on the array indices of `0` to `4`, what if you have an array with 5 items, or 10, or 100 in the future?

---

<div class="post-metadata">

**Author:** ![X11](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/x11/32/98759_2.png) [@X11](https://discuss.elastic.co/u/X11)\
**Post date:** [October 15, 2022, 2:53am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/29 "2022-10-15T02:53:13Z")

</div>

Echoing Leandro here… if the desire is to have a 1:1 reply.alerts[alert]:elastic doc then you need to split on reply.alerts;

Usually when applying such splits on initial ingestion POCs we’ll specify a target to make things easier to track and then drop the original array of objects (reply.alerts, which will contain duplicate / extraneous data after a successful split )

```auto
filter { 
  split {
    field => ‘[reply][alerts]’
    target => ‘my_arbitrary_fieldname’
    remove_field => ‘[reply][alerts]’
  }
}

```

and after successful split, your previous fields like

```auto
reply.alerts.is_pcap

```

Will be found under

```auto
my_arbitrary_fieldname.is_pcap

```

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 16, 2022, 9:06am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/30 "2022-10-16T09:06:09Z")

</div>

Executing a one line split generated this error. Losing hope on this "split" thingy.

```auto
filter{
		split { field => "[reply][alerts]" }
}
output {
...
}

```

```auto
"tags" => [
        [0] "_http_request_failure",
        [1] "_split_type_failure"
    ]
}
[2022-10-16T09:03:31,458][INFO][logstash.outputs.file][main][64a88add8f32dca0d184380e90f5de1d2d318a835b8d679a9eea8712f8197028] Closing file /usr/share/logstash/elogs/output/getusalerts_logs.txt
java.lang.OutOfMemoryError: Java heap space
Dumping heap to java_pid1.hprof ...
Heap dump file created [271942270 bytes in 1.354 secs]
[2022-10-16T09:04:10,386][FATAL][org.logstash.Logstash][main] uncaught error (in thread [main]>worker0)
java.lang.OutOfMemoryError: Java heap space
        at java.nio.HeapCharBuffer.<init>(java/nio/HeapCharBuffer.java:64) ~[?:?]
        at java.nio.CharBuffer.allocate(java/nio/CharBuffer.java:363) ~[?:?]
        at java.nio.charset.CharsetDecoder.decode(java/nio/charset/CharsetDecoder.java:799) ~[?:?]
        at java.nio.charset.Charset.decode(java/nio/charset/Charset.java:814) ~[?:?]
        at org.jruby.RubyEncoding.decodeUTF8(org/jruby/RubyEncoding.java:308) ~[jruby.jar:?]
        at org.jruby.RubyString.decodeString(org/jruby/RubyString.java:814) ~[jruby.jar:?]
        at org.jruby.RubyString.toJava(org/jruby/RubyString.java:6627) ~[jruby.jar:?]
        at org.jruby.RubyClass.new(org/jruby/RubyClass.java:895) ~[jruby.jar:?]
        at org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen) ~[jruby.jar:?]
        at java.lang.invoke.LambdaForm$DMH/0x00000008012d3400.invokeVirtual(java/lang/invoke/LambdaForm$DMH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012d4c00.invoke(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012bb800.reinvoke(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012bbc00.guard(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012bb800.reinvoke(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012bbc00.guard(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.Invokers$Holder.linkToCallSite(java/lang/invoke/Invokers$Holder) ~[?:?]
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_6_dot_0.gems.manticore_minus_0_dot_9_dot_1_minus_java.lib.manticore.client.request_from_options(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/manticore-0.9.1-java/lib/manticore/client.rb:536) ~[?:?]
        at java.lang.invoke.DirectMethodHandle$Holder.invokeStatic(java/lang/invoke/DirectMethodHandle$Holder) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x0000000801360400.invoke(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012be000.reinvoke(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012be400.guard(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012be000.reinvoke(java/lang/invoke/LambdaForm$MH) ~[?:?]
        at java.lang.invoke.LambdaForm$MH/0x00000008012be400.guard(java/lang/invoke/LambdaForm$MH) ~[?:?]

```

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 16, 2022, 9:18am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/31 "2022-10-16T09:18:59Z")

</div>

Agree. I see the json streaming in is not just **0 to 4** but **0 to 99**.  
I cannot paste the **event.original** and **http response** as the json is super lengthy with 99 alerts chained together.  
But the scheme is as posted in the previous post above.

Scheme: reply \> Alerts \> 0 to 99 \> fields.....

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [October 16, 2022, 1:04pm UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/32 "2022-10-16T13:04:30Z")

</div>

> java.lang.OutOfMemoryError: Java heap space

What is the heap size you are using for Logstash? Maybe you will need to increase it.

Also, as I said before, unless you share the original event you are receiving it is impossible to help you further as there is no sample data to try to replicate your issues.

> "tags" =\> [  
> [0] "\_http\_request\_failure",  
> [1] "\_split\_type\_failure"  
> ]

This means that your http request failed, and since it failed, the field `[reply][alerts]` does not exist or it is not an array.

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 21, 2022, 1:47am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/33 "2022-10-21T01:47:00Z")

</div>

Oooo. It works!

After I adjusted the heapsize from default 512m to 4g for Logstash and Kibana, Logstash managed to process the split without the heapsize error:

```auto
split { field => "[reply][alerts]" }

```

From one record to more than 100 records now in Kibana. Then an error hits

```auto
handleSearchError@http://localhost:5601/55434/bundles/plugin/data/kibana/data.plugin.js:1:409692
search/</<@http://localhost:5601/55434/bundles/plugin/data/kibana/data.plugin.js:1:412433
a/</s<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:106267
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </c</t.prototype.error/<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:329:46099
o@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:252982
__kbnSharedDeps_npm__ </c</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:329:45966
error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:430606
__kbnSharedDeps_npm__ </m</e.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89793
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
o@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:254482
__kbnSharedDeps_npm__ </l</e.prototype._trySubscribe@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:15794
__kbnSharedDeps_npm__ </l</e.prototype.subscribe/<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:15716
o@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:252982
__kbnSharedDeps_npm__ </l</e.prototype.subscribe@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:15631
a/</s<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:106309
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
s/</<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:125124
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
s/</<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:125124
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
v/</<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:7745

```

Another licensing error

```auto
[2022-10-21T01:45:35.849+00:00][WARN][plugins.licensing] License information could not be obtained from Elasticsearch due to ConnectionError: getaddrinfo ENOTFOUND elasticsearch error

```

Troubleshooting in progress. Trying to poll the data in batches instead of "Everything"

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 21, 2022, 1:50am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/34 "2022-10-21T01:50:58Z")

</div>

Released is ES that crashed.

```auto
{"@timestamp":"2022-10-21T01:41:07.129Z", "log.level":"ERROR", "message":"failed to store async-search [cmdP7NPVRFuS8Dd2jGQoqw]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[9fd38c1674f8][search][T#3]","log.logger":"org.elasticsearch.xpack.core.async.AsyncTaskIndexService","trace.id":"7a077afe67cf75ecb79542d811d080bc","elasticsearch.cluster.uuid":"OdZ2nhiUS0eRTsqm7LyMpA","elasticsearch.node.id":"lrho6hODTkK4zqCFfCK7mw","elasticsearch.node.name":"9fd38c1674f8","elasticsearch.cluster.name":"docker-cluster","error.type":"java.lang.IllegalArgumentException","error.message":"Can't store an async search response larger than [10485760] bytes. This limit can be set by changing the [search.max_async_search_response_size] setting.","error.stack_trace":"java.lang.IllegalArgumentException: Can't store an async search response larger than [10485760] bytes. This limit can be set by changing the [search.max_async_search_response_size] setting.\n\tat org.elasticsearch.xcore@8.4.1/

org.elasticsearch.xpack.core.async.AsyncTaskIndexService$ReleasableBytesStreamOutputWithLimit.ensureCapacity(AsyncTaskIndexService.java:634)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.BytesStreamOutput.writeBytes(BytesStreamOutput.java:86)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.write(StreamOutput.java:504)\n\tat org.elasticsearch.base@8.4.1/org.elasticsearch.core.Streams$1.write(Streams.java:92)\n\tat java.base/java.util.Base64$EncOutputStream.write(Base64.java:973)\n\tat org.elasticsearch.base@8.4.1/org.elasticsearch.core.Streams$1.write(Streams.java:92)\n\tat java.base/java.util.zip.DeflaterOutputStream.deflate(DeflaterOutputStream.java:261)\n\tat java.base/java.util.zip.DeflaterOutputStream.write(DeflaterOutputStream.java:210)\n\tat java.base/java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:81)\n\tat java.base/java.io.BufferedOutputStream.write(BufferedOutputStream.java:127)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.OutputStreamStreamOutput.writeBytes(OutputStreamStreamOutput.java:29)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeBytes(StreamOutput.java:121)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeString(StreamOutput.java:433)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeGenericString(StreamOutput.java:782)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.lambda$static$6(StreamOutput.java:649)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeGenericValue(StreamOutput.java:820)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeCollection(StreamOutput.java:1160)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.document.DocumentField.writeTo(DocumentField.java:118)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.search.SearchHit.lambda$writeTo$1(SearchHit.java:259)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeMap(StreamOutput.java:624)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.search.SearchHit.writeTo(SearchHit.java:259)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.lambda$writeArray$31(StreamOutput.java:939)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeArray(StreamOutput.java:916)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeArray(StreamOutput.java:939)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.search.SearchHits.writeTo(SearchHits.java:100)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.search.internal.InternalSearchResponse.writeTo(InternalSearchResponse.java:73)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.SearchResponse.writeTo(SearchResponse.java:434)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.writeOptionalWriteable(StreamOutput.java:953)\n\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.search.action.AsyncSearchResponse.writeTo(AsyncSearchResponse.java:96)\n\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService.writeResponse(AsyncTaskIndexService.java:578)\n\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService.lambda$updateResponse$3(AsyncTaskIndexService.java:291)\n\tat org.elasticsearch.xcontent@8.4.1/org.elasticsearch.xcontent.XContentBuilder.lambda$directFieldAsBase64$24(XContentBuilder.java:1212)\n\tat org.elasticsearch.xcontent.impl@8.4.1/org.elasticsearch.xcontent.provider.json.JsonXContentGenerator.writeDirectField(JsonXContentGenerator.java:557)\n\tat org.elasticsearch.xcontent@8.4.1/org.elasticsearch.xcontent.XContentBuilder.directFieldAsBase64(XContentBuilder.java:1206)\n\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService.updateResponse(AsyncTaskIndexService.java:291)\n\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService.updateResponse(AsyncTaskIndexService.java:270)\n\tat org.elasticsearch.xpack.search.TransportSubmitAsyncSearchAction.onFinalResponse(TransportSubmitAsyncSearchAction.java:204)\n\tat org.elasticsearch.xpack.search.TransportSubmitAsyncSearchAction$1$1.lambda$onResponse$1(TransportSubmitAsyncSearchAction.java:106)\n\tat org.elasticsearch.xpack.search.AsyncSearchTask.executeCompletionListeners(AsyncSearchTask.java:307)\n\tat org.elasticsearch.xpack.search.AsyncSearchTask$Listener.onResponse(AsyncSearchTask.java:446)\n\tat org.elasticsearch.xpack.search.AsyncSearchTask$Listener.onResponse(AsyncSearchTask.java:367)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(ContextPreservingActionListener.java:31)\n\tat org.elasticsearch.security@8.4.1/org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInternal$2(SecurityActionFilter.java:165)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.ActionListener$DelegatingFailureActionListener.onResponse(ActionListener.java:245)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.ActionListener$RunAfterActionListener.onResponse(ActionListener.java:367)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.AbstractSearchAsyncAction.sendSearchResponse(AbstractSearchAsyncAction.java:722)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.FetchLookupFieldsPhase.run(FetchLookupFieldsPhase.java:75)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:469)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:463)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.ExpandSearchPhase.onPhaseDone(ExpandSearchPhase.java:151)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.ExpandSearchPhase.run(ExpandSearchPhase.java:105)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:469)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:463)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.FetchSearchPhase.moveToNextPhase(FetchSearchPhase.java:271)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.FetchSearchPhase.lambda$innerRun$2(FetchSearchPhase.java:108)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.FetchSearchPhase.innerRun(FetchSearchPhase.java:117)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.action.search.FetchSearchPhase$1.doRun(FetchSearchPhase.java:90)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:33)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:769)\n\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26)\n\tat java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)\n\tat java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)\n\tat java.base/java.lang.Thread.run(Thread.java:833)\n\tSuppressed: java.lang.IllegalArgumentException: Can't store an async search response larger than [10485760] bytes. This limit can be set by changing the [search.max_async_search_response_size] setting.\n\t\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService$ReleasableBytesStreamOutputWithLimit.ensureCapacity(AsyncTaskIndexService.java:634)\n\t\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.BytesStreamOutput.writeBytes(BytesStreamOutput.java:86)\n\t\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.write(StreamOutput.java:504)\n\t\tat org.elasticsearch.base@8.4.1/org.elasticsearch.core.Streams$1.write(Streams.java:92)\n\t\tat java.base/java.util.Base64$EncOutputStream.write(Base64.java:973)\n\t\tat org.elasticsearch.base@8.4.1/org.elasticsearch.core.Streams$1.write(Streams.java:92)\n\t\tat java.base/java.util.zip.DeflaterOutputStream.deflate(DeflaterOutputStream.java:261)\n\t\tat java.base/java.util.zip.DeflaterOutputStream.finish(DeflaterOutputStream.java:226)\n\t\tat java.base/java.util.zip.DeflaterOutputStream.close(DeflaterOutputStream.java:244)\n\t\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.compress.DeflateCompressor$2.close(DeflateCompressor.java:186)\n\t\tat java.base/java.io.FilterOutputStream.close(FilterOutputStream.java:191)\n\t\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.OutputStreamStreamOutput.close(OutputStreamStreamOutput.java:39)\n\t\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService.writeResponse(AsyncTaskIndexService.java:576)\n\t\t... 34 more\n\t\tSuppressed: java.lang.IllegalArgumentException: Can't store an async search response larger than [10485760] bytes. This limit can be set by changing the [search.max_async_search_response_size] setting.\n\t\t\tat org.elasticsearch.xcore@8.4.1/org.elasticsearch.xpack.core.async.AsyncTaskIndexService$ReleasableBytesStreamOutputWithLimit.ensureCapacity(AsyncTaskIndexService.java:634)\n\t\t\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.BytesStreamOutput.writeBytes(BytesStreamOutput.java:86)\n\t\t\tat org.elasticsearch.server@8.4.1/org.elasticsearch.common.io.stream.StreamOutput.write(StreamOutput.java:504)\n\t\t\tat org.elasticsearch.base@8.4.1/org.elasticsearch.core.Streams$1.write(Streams.java:92)\n\t\t\tat java.base/java.util.Base64$EncOutputStream.write(Base64.java:973)\n\t\t\tat org.elasticsearch.base@8.4.1/org.elasticsearch.core.Streams$1.write(Streams.java:92)\n\t\t\tat java.base/java.util.zip.DeflaterOutputStream.deflate(DeflaterOutputStream.java:261)\n\t\t\tat java.base/java.util.zip.DeflaterOutputStream.write(DeflaterOutputStream.java:210)\n\t\t\tat java.base/java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:81)\n\t\t\tat java.base/java.io.BufferedOutputStream.flush(BufferedOutputStream.java:142)\n\t\t\tat java.base/java.io.FilterOutputStream.close(FilterOutputStream.java:182)\n\t\t\t... 36 more\n"}

ERROR: Elasticsearch exited unexpectedly

```

```auto
Can't store an async search response larger than [10485760] bytes. This limit can be set by changing the [search.max_async_search_response_size] setting.

```

Elasticsearch documentation: [https://www.elastic.co/guide/en/elasticsearch/reference/current/async-search.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/async-search.html)

From ES documentation

 ![Screenshot 2022-10-21 at 9.01.45 PM](https://us1.discourse-cdn.com/elastic/original/3X/7/5/7558988e0bb04504454fb0fab8fd51223bc66746.png)

---

<div class="post-metadata">

**Author:** ![Roger\_Huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/32/106867_2.png) [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\
**Post date:** [October 22, 2022, 2:33am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/35 "2022-10-22T02:33:41Z")

</div>

After i removed this code after research, async error is gone. From 100hits to 200 hits.

```auto
id => "http_pa"

```

But faced with another error. Still resolving this..

**The content length (612290936) is bigger than the maximum allowed string (536870888)**

```auto
handleSearchError@http://localhost:5601/55434/bundles/plugin/data/kibana/data.plugin.js:1:409692
search/</<@http://localhost:5601/55434/bundles/plugin/data/kibana/data.plugin.js:1:412433
a/</s<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:106267
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </c</t.prototype.error/<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:329:46099
o@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:252982
__kbnSharedDeps_npm__ </c</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:329:45966
error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:430606
__kbnSharedDeps_npm__ </m</e.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89793
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
o@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:254482
__kbnSharedDeps_npm__ </l</e.prototype._trySubscribe@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:15794
__kbnSharedDeps_npm__ </l</e.prototype.subscribe/<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:15716
o@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:252982
__kbnSharedDeps_npm__ </l</e.prototype.subscribe@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:15631
a/</s<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:106309
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
s/</<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:125124
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
s/</<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:364:125124
t/s._error<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:6:29525
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
__kbnSharedDeps_npm__ </f</t.prototype._error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:89350
__kbnSharedDeps_npm__ </f</t.prototype.error@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:334:88987
v/</<@http://localhost:5601/55434/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js:272:7745

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 19, 2022, 2:34am UTC](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327/36 "2022-11-19T02:34:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327.md?page=1)