### Author:  [@Ay\_Sa](https://discuss.elastic.co/u/Ay_Sa)
#### Post date: [June 4, 2020, 3:11pm UTC](https://discuss.elastic.co/t/want-to-remove-filed-who-change-his-position-from-json-response/235794/1 "2020-06-04T15:11:46Z")
hi i need help
i got this error on logstash
`], :response=>{"index"=>{"_index"=>"shodan_data_ip_history", "_type"=>"_doc", "_id"=>"sy7ef3IBfJwC4yBc10gf", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse field [data.ssl.cert.serial] of type [long] in document with id 'sy7ef3IBfJwC4yBc10gf'. Preview of field's value: '272721470987025980360415388385100183350393'", "caused_by"=>{"type"=>"json_parse_exception", "reason"=>"Numeric value (272721470987025980360415388385100183350393) out of range of long (-9223372036854775808 - 9223372036854775807)\n `
i heared that the solution is to remove that field , but the probleme is that field came in many positions like this
`[data][0][ssl][cert][serial] `
sometimes`[data][1][ssl][cert][serial]`
..
..
..
sometimes .... `[data][12][ssl][cert][serial]`
..
..
how can remove it in a generic way
thanks
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [June 4, 2020, 3:49pm UTC](https://discuss.elastic.co/t/want-to-remove-filed-who-change-his-position-from-json-response/235794/2 "2020-06-04T15:49:58Z")
You would have to use a ruby filter. Something like [this](https://discuss.elastic.co/t/logstash-filter-mutate-remove-field-inside-of-an-array/168503/11).
---
### Author:  [@Ay\_Sa](https://discuss.elastic.co/u/Ay_Sa)
#### Post date: [June 7, 2020, 8:07am UTC](https://discuss.elastic.co/t/want-to-remove-filed-who-change-his-position-from-json-response/235794/3 "2020-06-07T08:07:35Z")
thanks for replying ... you helped find the solution
---
### Author:  [@Ay\_Sa](https://discuss.elastic.co/u/Ay_Sa)
#### Post date: [June 7, 2020, 8:08am UTC](https://discuss.elastic.co/t/want-to-remove-filed-who-change-his-position-from-json-response/235794/4 "2020-06-07T08:08:10Z")
here is the solution
ruby {
code =\> '
volumesArray = event.get("data")
if volumesArray
newVolumesArray = []
volumesArray.each { |x|
x.delete("ssl")
newVolumesArray \<\< x
}
event.set("data", newVolumesArray)
end
'
}
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2020, 8:08am UTC](https://discuss.elastic.co/t/want-to-remove-filed-who-change-his-position-from-json-response/235794/5 "2020-07-05T08:08:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.