# Avro SchemaParseError

**URL:** <https://discuss.elastic.co/t/avro-schemaparseerror/190757>\
**Category:** Logstash\
**Created:** [July 16, 2019, 2:30pm UTC](https://discuss.elastic.co/t/avro-schemaparseerror/190757 "2019-07-16T14:30:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![DSPN](https://avatars.discourse-cdn.com/v4/letter/d/c89c15/32.png) [@DSPN](https://discuss.elastic.co/u/DSPN)\
**Post date:** [July 16, 2019, 2:30pm UTC](https://discuss.elastic.co/t/avro-schemaparseerror/190757/1 "2019-07-16T14:30:48Z")

</div>

Hi, I'm using logstash to load logs from Kafka to Elastic. Running logstash on openshift. I'm receiving the below error when trying to read the logs from the kafka topic. Can anyone help me figure what I'm missing here.

**Error** :

[2019-07-16T14:01:46,777][FATAL][logstash.runner]  
An unexpected error occurred! {:error=\>#\<Avro::SchemaParseError: Error validating default for meta: at . expected type map, got null\>,  
:backtrace=\>["/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:403:in `validate_default!'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:377:in`initialize'",  
"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:216:in `block in make_field_objects'", "org/jruby/RubyArray.java:1734:in`each'", "org/jruby/RubyEnumerable.java:1067:in `each_with_index'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:209:in`make\_field\_objects'",  
"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:240:in `initialize'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:72:in`real\_parse'",  
"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/avro-1.9.0/lib/avro/schema.rb:38:in `parse'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-codec-avro_schema_registry-1.1.1/lib/logstash/codecs/avro_schema_registry.rb:158:in`get\_schema'",  
"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-codec-avro\_schema\_registry-1.1.1/lib/logstash/codecs/avro\_schema\_registry.rb:228:in `decode'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-input-kafka-8.3.1/lib/logstash/inputs/kafka.rb:258:in`block in thread\_runner'",  
"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-input-kafka-8.3.1/lib/logstash/inputs/kafka.rb:257:in `block in thread\_runner'"]}

**Config** :

input  
{  
kafka  
{  
bootstrap\_servers =\> "{KAFKA\_HOST}" topics =\> ["{KAFKA\_TOPIC}"]  
security\_protocol =\> "SSL"  
ssl\_truststore\_location =\> "{KAFKA\_TRUSTSTORE}" ssl\_truststore\_password =\> "{KAFKA\_TRUSTSTORE\_PWD}"  
ssl\_keystore\_location =\> "{KAFKA\_KEYSTORE}" ssl\_keystore\_password =\> "{KAFKA\_KEYSTORE\_PWD}"  
ssl\_key\_password =\> "{KAFKA\_KEY\_PWD}" consumer\_threads =\> "10" decorate\_events =\> true codec =\> avro\_schema\_registry { endpoint =\> "{KAFKA\_SCHEMAREG}"  
}  
value\_deserializer\_class =\> "org.apache.kafka.common.serialization.ByteArrayDeserializer"

```
}

```

}

---

<div class="post-metadata">

**Author:** ![jgrigg](https://avatars.discourse-cdn.com/v4/letter/j/e68b1a/32.png) [@jgrigg](https://discuss.elastic.co/u/jgrigg)\
**Post date:** [August 4, 2019, 12:48pm UTC](https://discuss.elastic.co/t/avro-schemaparseerror/190757/2 "2019-08-04T12:48:29Z")

</div>

I ran into the same issue just now. For me, it was a bad avro schema that looked something like:  
`{ "name": "first", "type": ["null", "boolean"] , "default": false}`

According to [this](https://docs.oracle.com/database/nosql-12.1.3.0/GettingStartedGuide/avroschemas.html) avro documentation, default values for unions depend on the first field in the union. So my default value of false didn't match null type, causing this issue.

If you still need help with this, could you post your avro schema?

---

<div class="post-metadata">

**Author:** ![DSPN](https://avatars.discourse-cdn.com/v4/letter/d/c89c15/32.png) [@DSPN](https://discuss.elastic.co/u/DSPN)\
**Post date:** [August 4, 2019, 11:13pm UTC](https://discuss.elastic.co/t/avro-schemaparseerror/190757/3 "2019-08-04T23:13:57Z")

</div>

Thanks for the response. It was the same issue. I fixed the schema and it worked fine.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2019, 11:14pm UTC](https://discuss.elastic.co/t/avro-schemaparseerror/190757/4 "2019-09-01T23:14:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.