# Using json\_batch format in http output plugin

**URL:** https://discuss.elastic.co/t/using-json-batch-format-in-http-output-plugin/158429
**Category:** Logstash
**Created:** [November 27, 2018, 10:30pm UTC](https://discuss.elastic.co/t/using-json-batch-format-in-http-output-plugin/158429 "2018-11-27T22:30:56Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![HendPro12](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@HendPro12](https://discuss.elastic.co/u/HendPro12)
#### Post date: [November 27, 2018, 10:30pm UTC](https://discuss.elastic.co/t/using-json-batch-format-in-http-output-plugin/158429/1 "2018-11-27T22:30:56Z")

</div>

I am using Filebeat to send events to Logstash. Filebeat's internal queue has been configured so that events will be combined into events before being sent to the logstash output. I've modified pipeline.batch.size and pipeline.batch.delay as well as numerous other options in logstash.yml and filebeat.yml. Having specified json\_batch in my logstash conf file the output being sent via the http output plugin is being wrapped in array brackets. The issue I'm facing however is that in rare occurrences those brackets contain two JSON objects and in the majority of cases the brackets only contain one object. I would like to configure the batching so that I can control the number of objects in each request. How is this possible and why am I seeing the behavior that I'm experiencing?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 25, 2018, 10:31pm UTC](https://discuss.elastic.co/t/using-json-batch-format-in-http-output-plugin/158429/2 "2018-12-25T22:31:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
