# Vega-lite invalid spec error
**URL:** https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706
**Category:** Kibana
**Created:** [November 9, 2020, 5:50am UTC](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706 "2020-11-09T05:50:23Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@smruthip](https://discuss.elastic.co/u/smruthip)
#### Post date: [November 9, 2020, 5:50am UTC](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706/1 "2020-11-09T05:50:23Z")
I am just trying to do a simple count of all container\_id 's for every state in vega-lite and it thorws an error as invalid spec. What am I doing wrong here?
```auto
{
"$schema": "https://vega.github.io/schema/vega-lite/v2.json",
"title": "Event counts from all indexes",
"data": {
"url": {
"index": "my_index",
"body": {
"mark": "bar",
"encoding": {
"x": {"field": "currDetails_state"},
"y": {"aggregate": "distinct", "field": "currDetails_container_id.keyword", "type": "quantitative"}
}
}
}
}
}
```
---
### Author:  [@monfera](https://discuss.elastic.co/u/monfera)
#### Post date: [November 9, 2020, 2:49pm UTC](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706/2 "2020-11-09T14:49:54Z")
The `"mark"` specification should not be underneath the `"data"` specification; they should be at the same level. Please see structuring in the vega-lite [examples](https://vega.github.io/editor/#/examples/vega-lite/bar). Also, please expand the last item [here](https://www.elastic.co/guide/en/kibana/current/vega-lite-tutorial.html) labeled `▶ Expand final Vega-Lite spec`
---
### Author:  [@smruthip](https://discuss.elastic.co/u/smruthip)
#### Post date: [November 9, 2020, 5:26pm UTC](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706/3 "2020-11-09T17:26:59Z")
> [@monfera](#):
>
> here
Thank you Robert. That fixed the error.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 7, 2020, 5:26pm UTC](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706/4 "2020-12-07T17:26:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.