# Request failed with a 400 error. \[x\_content\_parse\_exception\] Failed to build \[xpack/rollup/jobconfig\] after last required field arrived

**URL:** <https://discuss.elastic.co/t/request-failed-with-a-400-error-x-content-parse-exception-failed-to-build-xpack-rollup-jobconfig-after-last-required-field-arrived/249252>\
**Category:** Elasticsearch\
**Created:** [September 20, 2020, 12:18pm UTC](https://discuss.elastic.co/t/request-failed-with-a-400-error-x-content-parse-exception-failed-to-build-xpack-rollup-jobconfig-after-last-required-field-arrived/249252 "2020-09-20T12:18:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![piyalkuet](https://avatars.discourse-cdn.com/v4/letter/p/8491ac/32.png) [@piyalkuet](https://discuss.elastic.co/u/piyalkuet)\
**Post date:** [September 20, 2020, 12:18pm UTC](https://discuss.elastic.co/t/request-failed-with-a-400-error-x-content-parse-exception-failed-to-build-xpack-rollup-jobconfig-after-last-required-field-arrived/249252/1 "2020-09-20T12:18:18Z")

</div>

Dear all, I am facing issues creating a rollup job for big indexes. While saving it gives me a exception "Request failed with a 400 error. [x\_content\_parse\_exception] Failed to build [xpack/rollup/jobconfig] after last required field arrived".

Please help in this case.

> PUT \_rollup/job/singleapp-nginx-rolled  
> {  
> "id": "singleapp-nginx-rolled",  
> "index\_pattern": "singleapp-nginx-\*",  
> "rollup\_index": "singleapp-nginx-rolled",  
> "cron": "0 20 \* \* \* 0",  
> "page\_size": 1000,  
> "groups": {  
> "date\_histogram": {  
> "interval": "60m",  
> "delay": "1d",  
> "time\_zone": "UTC",  
> "field": "@timestamp"  
> },  
> "terms": {  
> "fields": [  
> "fileset.name.keyword",  
> "host.hostname.keyword",  
> "nginx.access.response\_code.keyword"  
> ]  
> }  
> },  
> "metrics": [  
> {  
> "field": "@timestamp",  
> "metrics": [  
> "value\_count"  
> ]  
> }  
> ]  
> }

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [September 21, 2020, 11:53am UTC](https://discuss.elastic.co/t/request-failed-with-a-400-error-x-content-parse-exception-failed-to-build-xpack-rollup-jobconfig-after-last-required-field-arrived/249252/2 "2020-09-21T11:53:58Z")

</div>

Do you happen to have a full stack trace? You can [enable stack traces](https://www.elastic.co/guide/en/elasticsearch/reference/7.8/common-options.html#common-options-error-options) and then paste the output here.

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 19, 2020, 11:54am UTC](https://discuss.elastic.co/t/request-failed-with-a-400-error-x-content-parse-exception-failed-to-build-xpack-rollup-jobconfig-after-last-required-field-arrived/249252/3 "2020-10-19T11:54:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.