# Logstash http input posted content not available

**URL:** https://discuss.elastic.co/t/logstash-http-input-posted-content-not-available/234364
**Category:** Logstash
**Created:** [May 26, 2020, 3:02pm UTC](https://discuss.elastic.co/t/logstash-http-input-posted-content-not-available/234364 "2020-05-26T15:02:02Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![lkalaivanan](https://avatars.discourse-cdn.com/v4/letter/l/74df32/32.png) [@lkalaivanan](https://discuss.elastic.co/u/lkalaivanan)
#### Post date: [May 26, 2020, 3:02pm UTC](https://discuss.elastic.co/t/logstash-http-input-posted-content-not-available/234364/1 "2020-05-26T15:02:02Z")

</div>

Hi All

Infra:  
cadvisor --\> logstash --\> elasticsearch --\> kibana

We are trying to achieve the above infra. Like cadvisor to post container\_stats to the elasticsearch via logstash

**Log stash config :**

```
input {
  http { codec => "es_bulk" }
}
output {
 elasticsearch {
   hosts => "172.31.72.111:9200"
 }
 stdout { codec => rubydebug {
        metadata => true
    }
 }
}

```

The expectation is that the container\_stats will be posted to elasticsearch via logstash

but the following data was posted instead,

{  
"headers" =\> {  
"http\_version" =\> "HTTP/1.1",  
"http\_connection" =\> "upgrade",  
"request\_method" =\> "POST",  
"http\_host" =\> "x.y.z",  
"request\_uri" =\> "/\_bulk",  
"http\_user\_agent" =\> "elastic/5.0.39 (linux-amd64)",  
"http\_vary" =\> "Accept-Encoding",  
"http\_accept" =\> "application/json",  
"content\_type" =\> "application/json",  
"http\_x\_forwarded\_host" =\> "x.y.z",  
"http\_accept\_encoding" =\> "gzip",  
"http\_x\_forwarded\_for" =\> "172.31.41.214",  
"request\_path" =\> "/\_bulk",  
"http\_x\_real\_ip" =\> "172.31.41.214",  
"content\_length" =\> 7683  
},  
"@timestamp" =\> 2020-05-26T14:19:18.998Z,  
"@version" =\> "1",  
"host" =\> "172.17.0.1",  
"index" =\> {  
"\_index" =\> "http-2020.05.26",  
"\_type" =\> "stats"  
}  
}

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 23, 2020, 3:02pm UTC](https://discuss.elastic.co/t/logstash-http-input-posted-content-not-available/234364/2 "2020-06-23T15:02:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.