# Unexpected type mapstr.M warning

**URL:** https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834
**Category:** Beats
**Tags:** filebeat
**Created:** [December 8, 2022, 9:41pm UTC](https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834 "2022-12-08T21:41:27Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Alex\_Lavrov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_lavrov/32/114440_2.png) [@Alex\_Lavrov](https://discuss.elastic.co/u/Alex_Lavrov)
#### Post date: [December 8, 2022, 9:41pm UTC](https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834/1 "2022-12-08T21:41:27Z")

</div>

Hello,

I'm sending JSON logs using filebeat and suddenly I started to get this error:

{"log.level":"warn","@timestamp":"2022-12-08T23:33:51.575+0200","log.logger":"conditions","log.origin":{"file.name":"conditions/matcher.go","file.line":96},"message":"unexpected type mapstr.M in contains condition as it accepts only strings.","service.name":"filebeat","ecs.version":"1.6.0"}

Can't understand what exactly causing it. I checked all log entries, all of them are valid JSON's ...

Thank you in advance.

---

<div class="post-metadata">

### Author: ![Venkata\_Raja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkata_raja/32/114264_2.png) [@Venkata\_Raja](https://discuss.elastic.co/u/Venkata_Raja)
#### Post date: [December 9, 2022, 10:35am UTC](https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834/2 "2022-12-09T10:35:39Z")

</div>

Hi Alex,

Welcome to Community!  
It seems your contains condition is throwing an error as it is expecting strings only. Check your filebeat processors configuration?  
More details here: [Define processors | Filebeat Reference [8.5] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/defining-processors.html#condition-contains)

---

<div class="post-metadata">

### Author: ![Alex\_Lavrov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_lavrov/32/114440_2.png) [@Alex\_Lavrov](https://discuss.elastic.co/u/Alex_Lavrov)
#### Post date: [December 9, 2022, 11:28am UTC](https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834/3 "2022-12-09T11:28:20Z")

</div>

Hello,

Thank you for the welcome 😉

The only processors section that I have is the default one:

```auto
processors:
  - add_host_metadata:
      when.not.contains.tags: forwarded
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~

```

---

<div class="post-metadata">

### Author: ![Venkata\_Raja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkata_raja/32/114264_2.png) [@Venkata\_Raja](https://discuss.elastic.co/u/Venkata_Raja)
#### Post date: [December 9, 2022, 1:05pm UTC](https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834/4 "2022-12-09T13:05:11Z")

</div>

If you are not using that contains condition , you can remove it

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 6, 2023, 3:05pm UTC](https://discuss.elastic.co/t/unexpected-type-mapstr-m-warning/320834/5 "2023-01-06T15:05:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
