FIlebeat sends garbled messages to logstash

Elastic Stack Beats
1

Hi,

Around midnight, filebeat sends garbled messages like "message":"\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000" to logstash. The log file is in a glusterfs network share. We are using filebeat version 6.0.
Please advise on what can be done for this.

Thanks and Regards,
Breetty

2

Hi @breetty,

Is this always happening at the same ~time? I'm wondering, does the file gets rotated at that time?

Best regards

3

Hi,
Yes it is always happening at same time time range, from 12:30 am to 2:00 am. The log keeps rotating multiple times in a day but the last rotation for the day happens during that time only. Do you think that is a problem?
Jun 20 00:00 Logfile.log.20
Jun 20 01:12 Logfile.log.19
Jun 20 01:32 Logfile.log.18
Jun 20 05:00 Logfile.log.22
Jun 20 14:35 Logfile.log.13
Jun 20 14:36 Logfile.log.14
Jun 20 14:36 Logfile.log.9
Jun 20 14:37 Logfile.log.10
Jun 20 16:25 Logfile.log.12
Jun 20 16:31 Logfile.log.15
Jun 21 00:53 Logfile.log.6
Jun 21 01:12 Logfile.log.4

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.