# \[WARN \] 2021-05-06 23:01:18.054 \[\[marketdata\_fix\_pipeline\]\>worker0\] split - Only String and Array types are splittable. field:\[layers\]\[fix\] is of type = Hash

**URL:** <https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344>\
**Category:** Logstash\
**Created:** [May 6, 2021, 11:13pm UTC](https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344 "2021-05-06T23:13:49Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![wmei](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wmei/32/88204_2.png) [@wmei](https://discuss.elastic.co/u/wmei)\
**Post date:** [May 6, 2021, 11:13pm UTC](https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344/1 "2021-05-06T23:13:49Z")

</div>

Hi,

I am getting this warning message and I believe it is because some of the events do not have a [layers][fix].

```
[WARN] 2021-05-06 23:01:18.054 [[marketdata_fix_pipeline]>worker0] split - Only String and Array types are splittable. field:[layers][fix] is of type = Hash

```

Here is what I have in my logstash.config and I am trying to understand why events would continue through this conditional if they don't have a [layers][fix].

```auto
if [msg_count] > 1 and [layers][fix] {
  split {
    field => "[layers][fix]"
    add_tag => ["multi-message"]
  }
}

```

Thanks!!  
Wei

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [May 6, 2021, 11:42pm UTC](https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344/2 "2021-05-06T23:42:33Z")

</div>

> [@wmei](#):
>
> I believe it is because some of the events do not have a [layers][fix]

No, it is because [layers][fix] is a hash. That is, there are fields inside it, maybe something like [layers][fix][fix\_fix\_SendingTime].

---

<div class="post-metadata">

**Author:** ![wmei](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wmei/32/88204_2.png) [@wmei](https://discuss.elastic.co/u/wmei)\
**Post date:** [May 7, 2021, 12:03am UTC](https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344/3 "2021-05-07T00:03:42Z")

</div>

you are correct Badger. there are multiple fix under the layer and i am trying to split them by the [layer][fix]. I see the split\_failure tag on the events that don’t have the [layer][fix] present and am wondering how i can skip the split on those. Shouldn’t my conditional work?

---

<div class="post-metadata">

**Author:** ![wmei](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wmei/32/88204_2.png) [@wmei](https://discuss.elastic.co/u/wmei)\
**Post date:** [May 7, 2021, 12:16am UTC](https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344/4 "2021-05-07T00:16:08Z")

</div>

I found the issue. I was counting the number of occurrences of \_Begin and lo' and behold this particular event actually had two even though it only had one [layer][fix] which caused by split failure.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 4, 2021, 12:16am UTC](https://discuss.elastic.co/t/warn-2021-05-06-2318-054-marketdata-fix-pipeline-worker0-split-only-string-and-array-types-are-splittable-field-layers-fix-is-of-type-hash/272344/5 "2021-06-04T00:16:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.