diff --git a/misconfiguration/elasticsearch.yaml b/misconfiguration/elasticsearch.yaml
index 3da231754e..782a8e267c 100644
--- a/misconfiguration/elasticsearch.yaml
+++ b/misconfiguration/elasticsearch.yaml
@@ -24,7 +24,15 @@ requests:
         words:
           - '"took":'
           - '"number" :'
-          - '"number_of_nodes" :'
+          - '"number_of_nodes"'
+        condition: or
+
+      - type: word
+        part: header
+        words:
+          - application/json
+          - application/vnd.api+json
+          - text/plain
         condition: or
 
       - type: status