JSON parse error, Could not set field 'ip' on object '<hostname>.<domain>.com' to value '10.XXX.XX.XX'.This is probably due to trying to set a field like [foo][bar] = someValuewhen [foo] is not either a map or a string"

Elastic Stack Logstash
1

Hi,

Error message -


JSON parse error, Could not set field 'ip' on object '<hostname>.<domain>.com' to value '10.XXX.XX.XX'.This is probably due to trying to set a field like [foo][bar] = someValuewhen [foo] is not either a map or a string", :exception=>Java::OrgLogstash::Accessors::InvalidFieldSetException,

Logstash config:

# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.

input {
  http {
    port => 5555
	codec => "json_lines"  -- Also tried "json"
  }
}


output {
  elasticsearch {
    hosts => ["http://localhost:9200"]
	index => "index_a"
	#index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
    user => "elastic"
	password => "xxxxxx"
  }
}

[2022-09-06T07:51:14,981][ERROR][logstash.codecs.json ][main][8389505e72a806ebe48e512a58ff4661cbcb99033c706ae098ddc4ff93614cde] JSON parse error, original data now in message field {:message=>"Could not set field 'ip' on object '..com' to value '10.XXX.XX.X'.This is probably due to trying to set a field like [foo][bar] = someValuewhen [foo] is not either a map or a string", :exception=>Java::OrgLogstash::Accessors::InvalidFieldSetException, :data=>"[{"type":"ace_message","ibm_product":"IBM App Connect Enterprise","ibm_recordtype":"log","host":"..com","module":"ABC.","ibm_serverName":"ABC","ibm_processName":"DataFlowEngine","ibm_processId":"15644","ibm_threadId":"15644","ibm_datetime":"2022-09-06T02:50:14.015975","loglevel":"INFO","message":"2152I: Configuration message received. ","ibm_message_detail":"2152I: Configuration message received.

Pls advise what I am missing here.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.