I understood this as the Blob object of Oracle is causing it
{
"xid" => #<Sequel::SQL::Blob:0xea1c0 bytes=8 content="K\x00\e\x003\xBC\x00\x00">,
"@version " => "1",
"@timestamp " => 2020-02-26T20:10:14.105Z
}
I came across a blog that there is a patch to this - I will update if I learn anything by applying the patch
I've pushed a fix to the codec, but am waiting for a teammate to review before we publish the updated Gem.
If you want, you can edit your local gem to apply the patch manually, which will circumvent the bundler issues (we can chase those down in a separate thread if they continue to get in the way).
change into the current plugin's directory, likely something like:cd ${LOGSTASH_HOME}/vendor/bundle/jruby/2.3.0/gems/logstash-input-jdbc-4.3.9
download the .patch from logstash-plugins/logstash-…