# \[Urgent\] How to fix host issue in filebeat-7.17.4 without drop\_fields

**URL:** https://discuss.elastic.co/t/urgent-how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/307353
**Category:** Beats
**Tags:** filebeat
**Created:** [June 16, 2022, 7:18am UTC](https://discuss.elastic.co/t/urgent-how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/307353 "2022-06-16T07:18:48Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![mbmannubisht](https://avatars.discourse-cdn.com/v4/letter/m/7993a0/32.png) [@mbmannubisht](https://discuss.elastic.co/u/mbmannubisht)
#### Post date: [June 16, 2022, 7:18am UTC](https://discuss.elastic.co/t/urgent-how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/307353/1 "2022-06-16T07:18:48Z")

</div>

Hi Team,

Stuck in one issue if I drop\_fields of host then it will work otherwise not working

Working condition code:

```auto
- drop_fields:
      fields: ["beat", "offset", "source", "type", "input_type", "host"]
      ignore_missing: true

```

Not Working condition code:

```auto
rocessors:
  - drop_fields:
      fields: ["beat", "offset", "source", "type", "input_type"]
      ignore_missing: true

```

Error is here :=\>

```auto
Could not index event to Elasticsearch.status: 400, action:
"type" => "mapper_parsing_exception", "reason" => "failed to parse field [host] of type [text] in document with id ''. Preview of field's value: '{name=hostname}'", "caused_by" => {
				"type" => "illegal_state_exception", "reason" => "Can't get text on a START_OBJECT at 1:468"

```

Please suggest on this

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 16, 2022, 8:11am UTC](https://discuss.elastic.co/t/urgent-how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/307353/2 "2022-06-16T08:11:58Z")

</div>

Please don't create multiple topics on the same topic, it makes it much harder for people to help 🙂

> [@How to fix host issue in filebeat-7.17.4 without drop\_fields](https://discuss.elastic.co/t/how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/306890):
>
> Hi Team, Stuck in one issue if I drop\_fields of host then it will work otherwise not working Working condition code: - drop\_fields: fields: ["beat", "offset", "source", "type", "input\_type", "host"] ignore\_missing: true Not Working condition code: processors: - drop\_fields: fields: ["beat", "offset", "source", "type", "input\_type"] ignore\_missing: true Error is here :=\> Could not index event to Elasticsearch.status: 400, action: "type" =\> "mapper\_parsing\_excep…

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 16, 2022, 8:12am UTC](https://discuss.elastic.co/t/urgent-how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/307353/3 "2022-06-16T08:12:02Z")

</div>


