Kibana: unexpected character at line 1 column 1 of the JSON data

Elastic Stack Kibana
1

Hi,

I'm just implemented elastic stack as a log analyzer and still learning to use it.

I have a problem with kibana on a dashboard with multiple visualizations. When I'm trying to show all visualizations from 2 months ago to present an error occured like this "[esaggs] > JSON.parse: unexpected character at line 1 column 1 of the JSON data" over and over again with multiplied "[esaggs]". But when I'm trying to show all visualizations from a month ago to present is successful.
Futhermore on the other dashboard with multiple visualizations is successful to show all visualizations even from 3 months ago to present.

My questions are:

  1. What is the meaning of this error message?
  2. Which one is the problem? kibana or elasticsearch?
  3. Where I can find more detailed error message to solve this problem?

Additional information:

  • elasticsearch and kibana are ver. 7.6.2
  • elasticsearch single node mode
  • openjdk ver. 13.0.2
  • 4 CPU and 8GB memory

Regards,
Ade

2

Anyone can help my problem? Thank you!

3

It's possible these are actually timeout errors because the request runs longer than the configured timeout.

They show up like this prior to 7.7 - here is the issue: https://github.com/elastic/kibana/issues/57327

Try increasing elasticsearch.requestTimeout: and elasticsearch.shardTimeout in your kibana.yml file.

4

Thank you for your respond!

I have set elasticsearch.requestTimeout and elasticsearch.shardTimeout to 90000 and the result is successful to show all visualizations from 2 months ago :grin:

Futhermore I'm trying to show all visualizations from 3 months ago and the result is [esaggs] > JSON.parse: unexpected character at line 1 column 1 of the JSON data again, even though I have set elasticsearch.requestTimeout and elasticsearch.shardTimeout to 300000 :pensive:

Is this my server limits due to its specification?
Is there a way to turn off the timeout feature and make kibana wait for all visualizations process finish? I don't mind if the visualization process take half an hour or more..

5

Check your Kibana and Elasticsearch server logs whether you are running in other timeouts. I think starting in 7.8 or 7.9 there is a feature to let queries run past the timeout (there will be a modal with a button you can confirm).

Also, these runtimes are quite high. If you are not using the individual documents but are just interested in aggregates, consider using the rollup feature to store only the metrics you are interested in - this will result in faster queries as well as less disk space.

1 Like
6

I have checked the server logs, the timeout only shown in Kibana log and I will try to upgrade to the version you mentioned.

Okay I will check the rollup feature.

Thank you for your advice.
I will try to post the update before this post automatically close by the system.

7

I just upgraded the elastic stack to 7.8.0 (I want to upgrade to 7.9.0 but still unavailable publicly) and as you said the new feature to let queries run beyond timeout is available.
dsa

Finally I can show all visualizations even from the beginning to present! :grin:
It was took only for several minutes to finish the whole visualizations in a dashboard, which is fine.

Thank you Joe for your assistance!
Have a nice day!

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.