Fail to parse HTTP parameters: parse "response\"}}\nPOST /_bulk": net/url: invalid control character in

Elastic Stack Beats
,
1

I'm running packetbeat version 7.10.1;
Looking at its logs I see

2020-12-25T23:08:29.956Z        WARN    http/http.go:545        Fail to parse HTTP parameters: parse "response\"}}\nPOST /_bulk": net/url: invalid control character in URL

That's the request coming from when I work with Kibana, but in anycase, the same error for any other requests such as

Another example of URL having the same error

2020-12-25T23:09:46.540Z        WARN    http/http.go:545        Fail to parse HTTP parameters: parse "{\"@timestamp\":\"2020-12-25T23:09:44.312Z\",\"ecs\":{\"version\":\"1.5.0\"},\"agent\":{\"type\":\"packetbeat\",\"version\":\"7.10.1\",\"hostname\":\"cluster_21xx\",\"ephemeral_id\":\"728fb7c8-8344-4a1f-8021-8e2730b98988\",\"id\":\"9069b0f6-b828-4733-89af-e6f592808e02\",\"name\":\"cluster_21xx\"},\"server\":{\"ip\":\"127.0.0.1\",\"port\":59326,\"bytes\":357},\"network\":{\"protocol\":\"http\",\"community_id\":\"1:HdIpZ+IuSXViGm8pYO7iR+8/w5U=\",\"bytes\":357,\"type\":\"ipv4\",\"transport\":\"tcp\"},\"type\":\"http\",\"source\":{\"ip\":\"172.18.0.2\",\"port\":9200},\"destination\":{\"ip\":\"127.0.0.1\",\"port\":59326,\"bytes\":357},\"host\":{\"name\":\"cluster_21xx\"},\"client\":{\"ip\":\"172.18.0.2\",\"port\":9200},\"event\":{\"end\":\"2020-12-25T23:09:44.312Z\",\"category\":[\"network_traffic\",\"network\"],\"type\":[\"connection\",\"protocol\"],\"kind\":\"event\",\"dataset\":\"http\"},\"related\":{\"ip\":[\"172.18.0.2\",\"127.0.0.1\"]},\"status\":\"Error\",\"error\":{\"message\":\"Unmatched response\"},\"http\":{\"response\":{\"status_phrase\":\"ok\",\"status_code\":200,\"bytes\":357,\"body\":{\"bytes\":246},\"headers\":{\"content-length\":246,\"content-type\":\"application/json; charset=UTF-8\"}}}}\nPOST /_bulk": net/url: invalid control character in URL

Here's the packetbeat.yml file content:

packetbeat.interfaces.device: any
packetbeat.interfaces.snaplen: 1514
packetbeat.interfaces.type: af_packet
packetbeat.interfaces.buffer_size_mb: 100

packetbeat.protocols:
  - type: icmp
    enabled: true

  - type: dhcpv4
    ports: [67, 68]

  - type: dns
    ports: [53]

  - type: http
    ports: [80, 8000]

  - type: amqp
    ports: [5672]

  - type: cassandra
    ports: [9042]

  - type: memcache
    ports: [11211]

  - type: mysql
    ports: [3306,3307]

  - type: redis
    ports: [6379]

  - type: pgsql
    ports: [5432]

  - type: thrift
    ports: [9090]

  - type: tls
    ports: [443, 993, 995, 5223, 8443, 8883, 9243]

Any idea what could be the problem?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.