# I am getting Mapping\_parsing error in logtsah

**URL:** <https://discuss.elastic.co/t/i-am-getting-mapping-parsing-error-in-logtsah/325083>\
**Category:** Logstash\
**Tags:** ingest-pipeline\
**Created:** [February 9, 2023, 4:52am UTC](https://discuss.elastic.co/t/i-am-getting-mapping-parsing-error-in-logtsah/325083 "2023-02-09T04:52:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![upreddy](https://avatars.discourse-cdn.com/v4/letter/u/f04885/32.png) [@upreddy](https://discuss.elastic.co/u/upreddy)\
**Post date:** [February 9, 2023, 4:52am UTC](https://discuss.elastic.co/t/i-am-getting-mapping-parsing-error-in-logtsah/325083/1 "2023-02-09T04:52:35Z")

</div>

Hi,  
We can see there are different values for "partition" for the "XYZ" operation logs (logtype also same).  
loglines are:  
(1). 2023-01-05T20:46:21.36348538Z stdout F 2023-01-05 20:46:21.363 [INFO] - {"logtype":"ABC","operation":"XYZ","partition":,"topic":"INT\_XXXX\_TD"}

(2). 2023-01-05T20:38:26.998223061Z stdout F 2023-01-05 20:38:26.998 [INFO] - {"logtype":"ABC","operation":"XYZ","partition":[{"Topic":"INT\_XXXX\_RETRY","Partition":1,"Offset":-1111,"Metadata":null,"Error":null},{"Topic":"INT\_XXXX\_RETRY","Partition":0,"Offset":-1111,"Metadata":null,"Error":null}],"topic":"INT\_XXXX\_RETRY"}

(3) 2023-01-05T20:46:21.36312474Z stdout F 2023-01-05 20:46:21.362 [INFO] - {"logtype":"ABC","operation":"XYZ","partition":[{"Topic":"INT\_XXXX\_TD","Partition":0,"Offset":-1111,"Metadata":null,"Error":null}],"topic":"INT\_XXXX\_TD"}

In above 2 logs the "partition" value is not constant some times it is "null" and sometimes it is "Array". I need to drop "partition" value is "null" logs and only i need to get remaining logs (i.e log number 2 &3).Could you please guide me how to get "partition" as a field in kibana and which condition i need to mentioned in logstash config.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2023, 4:53am UTC](https://discuss.elastic.co/t/i-am-getting-mapping-parsing-error-in-logtsah/325083/2 "2023-03-09T04:53:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.