Trying to parse JSON data from file (single line JSON data), harvester is being started again and again after close_inactive time. filebeat.yml: filebeat.inputs: - type: log enabled: true paths: - D:\ELK\Logs\* close_inactive: 1m json.keys_under_root: true json.add_error_key: true …

Found the solution, after the one line json, newline (\n) was missing in the file, when added, it worked properly on windows too.

Harvester in loop while parsing JSON data

Elastic Stack Beats

aksroh (Akshit Rohra) February 25, 2020, 4:39am 7

I deleted the data and logs folder in Filebeat, the logs are being created.
This time I tried to send non-JSON logs but still it didn't send those.
This issue I am facing is on Windows 10 64-bit with filebeat 7.6.0, whereas with the same configuration and versions on linux OS, I am not facing this kind of issue, can you suggest me some stable version of filebeat for Windows 10?

Topic		Replies	Views
JSON file -> Filebeat -> Logstash Logstash	7	1901	November 3, 2020
Filebeat is not able to parse json from files where \n separated json lines (events) are written. It sometimes misses the records and sometimes gives error when traffic is high Beats filebeat	15	7705	December 29, 2017
How to read json file using filebeat and send it to elasticsearch Beats	28	43447	July 25, 2017
Harvester.go infinitely loops on decoding JSON, fails to provide error context Beats filebeat	4	1504	July 1, 2019
Filebeat is not processing the logs which suppose to be sending to LogStash hosted in same Machine Beats filebeat	6	669	August 14, 2020

Harvester in loop while parsing JSON data

Related topics