# "type":"parse\_exception","reason":"request body is required"},"status":400}

**URL:** <https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664>\
**Category:** Elasticsearch\
**Created:** [November 8, 2020, 11:09am UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664 "2020-11-08T11:09:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![PADMAVATHI\_GUNTURU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/padmavathi_gunturu/32/78636_2.png) [@PADMAVATHI\_GUNTURU](https://discuss.elastic.co/u/PADMAVATHI_GUNTURU)\
**Post date:** [November 8, 2020, 11:09am UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664/1 "2020-11-08T11:09:57Z")

</div>

When using the \_bulk API, curl command, I'm seeing this error. I have given 3 JSON files. 2 files were worked, one file is thrown this error. I don't understand the reason here. The 3rd file input data is like the below formate. Is there any mistake in the input file? `{"index":{}} {"rawmessage":"{\"client_id\":\"6b3c549d\",\"sensor_id\":\"BE_JH_S01\",\"log\":{\"file\":{\"path\":\"/usr/local/logs/current/dns.log\"}},\"id.resp_p\":53,\"beat\":{\"version\":\"6.8.7\",\"hostname\":\"localhost.localdomain\",\"name\":\"localhost.localdomain\"},\"@version\":\"1\",\"AA\":false,\"trans_id\":14828,\"ts\":1.603953834579946E9,\"query\":\"api.cylance.com\",\"qtype\":1,\"host\":{\"name\":\"localhost.localdomain\"},\"uid\":\"CzLnfD204cdNneMa34\",\"rejected\":false,\"fields\":{\"type\":\"dns\"},\"qclass_name\":\"C_INTERNET\",\"id.orig_p\":55351,\"RD\":false,\"qclass\":1,\"@timestamp\":\"2020-10-29T06:44:05.449Z\",\"offset\":909106,\"RA\":false,\"source\":\"/usr/local/logs/current/dns.log\",\"Z\":0,\"id.resp_h\":\"192.203.230.10\",\"tags\":[\"beats_input_raw_event\"],\"TC\":false,\"qtype_name\":\"A\",\"id.orig_h\":\"10.40.1.4\",\"proto\":\"udp\"}","client_id":"6b3c549d","sensor_id":"BE_JH_S01","dns":{"qtype":1,"uid":"CzLnfD204cdNneMa34","dpt":53,"rejected":false,"qclass_name":"C_INTERNET","RD":false,"qclass":1,"src":"10.40.1.4","RA":false,"Z":0,"dst":"192.203.230.10","AA":false,"start":"2020-10-29T06:43:54.579Z","trans_id":14828,"spt":55351,"TC":false,"query":"api.cylance.com","qtype_name":"A","proto":"udp"},"log":{"file":{"path":"/usr/local/logs/current/dns.log"}},"host":{"name":"localhost.localdomain"},"timestamp":"2020-10-29T06:44:05.449Z","fields":{"type":"dns"},"@timestamp":"2020-10-29T06:43:54.579Z"}`  
indent preformatted text by 4 spaces

---

<div class="post-metadata">

**Author:** ![PADMAVATHI\_GUNTURU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/padmavathi_gunturu/32/78636_2.png) [@PADMAVATHI\_GUNTURU](https://discuss.elastic.co/u/PADMAVATHI_GUNTURU)\
**Post date:** [November 8, 2020, 6:40pm UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664/2 "2020-11-08T18:40:02Z")

</div>

Here, my 1st, 2nd files sizes are 100mb,150mb and the 3rd file is around 500mb. when I'm splitting the 3rd file into 100mb sizes the command (curl -X POST -s -u elastic:XXXXXXXXX "http://{HOSTNAME}:9200/{index[i]}/\_doc/\_bulk" -H "Content-Type: application/x-ndjson" --data-binary "@${path[i]}) is working, So, what size of file should i have to give here, if i have 1gb file suggest me other way to write data to elasticsearch?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 8, 2020, 7:42pm UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664/3 "2020-11-08T19:42:02Z")

</div>

You must split it in smaller pieces.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [November 8, 2020, 8:12pm UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664/4 "2020-11-08T20:12:33Z")

</div>

The bulk interface is used to send batches of documents to Elasticsearch to make indexing more efficient. A general recommendation is to keep the size of each bulk request below 5MB. It is not designed to upload very large files.

---

<div class="post-metadata">

**Author:** ![PADMAVATHI\_GUNTURU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/padmavathi_gunturu/32/78636_2.png) [@PADMAVATHI\_GUNTURU](https://discuss.elastic.co/u/PADMAVATHI_GUNTURU)\
**Post date:** [November 9, 2020, 7:01am UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664/5 "2020-11-09T07:01:18Z")

</div>

Thanks guys,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2020, 7:01am UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664/6 "2020-12-07T07:01:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
