# Logstash - Can't get text on a START\_OBJECT

**URL:** <https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400>\
**Category:** Logstash\
**Created:** [September 21, 2020, 5:42pm UTC](https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400 "2020-09-21T17:42:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bruno\_aleixo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bruno_aleixo/32/68834_2.png) [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Post date:** [September 21, 2020, 5:42pm UTC](https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400/1 "2020-09-21T17:42:33Z")

</div>

Hi, could help me with errors at the logstash

[2020-09-21T13:48:42,854][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"apimanager-2020.09.21", :\_type=\>"doc", :routing=\>nil}, #LogStash::Event:0x72287a20], :response=\>{"index"=\>{"\_index"=\>"apimanager-2020.09.21", "\_type"=\>"doc", "\_id"=\>"cWiRsXQBL24JsUDhSSch", "status"=\>400, "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse field [source] of type [text]", "caused\_by"=\>{"type"=\>"illegal\_state\_exception", "reason"=\>"Can't get text on a START\_OBJECT at 1:455"}}}}}

[2020-09-21T13:51:15,208][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"apimanager-2020.09.21", :\_type=\>"doc", :routing=\>nil}, #LogStash::Event:0x4048a020], :response=\>{"index"=\>{"\_index"=\>"apimanager-2020.09.21", "\_type"=\>"doc", "\_id"=\>"B2yTsXQBL24JsUDhmFek", "status"=\>400, "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse field [kubernetes.labels.app] of type [text]", "caused\_by"=\>{"type"=\>"illegal\_state\_exception", "reason"=\>"Can't get text on a START\_OBJECT at 1:851"}}}}}

I did the configuration at the logstash like this

input {  
beats {  
port =\> "5053"  
}  
}

filter {  
mutate {  
convert =\> {  
"kubernetes.labels.app" =\> "string"  
}  
}  
}

output {  
elasticsearch {  
hosts =\> ["elk1:9200"]  
index =\> "apimanager-%{+YYYY.MM.dd}"  
}  
}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [September 21, 2020, 7:15pm UTC](https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400/2 "2020-09-21T19:15:36Z")

</div>

Read [this](https://discuss.elastic.co/t/logstash-errors-mapper-parsing-exception-vs-illegal-argument-exception/236783/3) post and then [this](https://discuss.elastic.co/t/problem-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch-wazuh-alerts-3-x-2020-05-30/235038/6) post.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 19, 2020, 7:15pm UTC](https://discuss.elastic.co/t/logstash-cant-get-text-on-a-start-object/249400/3 "2020-10-19T19:15:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.