# Logstash 5 with kafka input plugin 4.1.1 not decoding avro messages

**URL:** <https://discuss.elastic.co/t/logstash-5-with-kafka-input-plugin-4-1-1-not-decoding-avro-messages/73173>\
**Category:** Logstash\
**Created:** [January 30, 2017, 9:31am UTC](https://discuss.elastic.co/t/logstash-5-with-kafka-input-plugin-4-1-1-not-decoding-avro-messages/73173 "2017-01-30T09:31:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Naushad\_Ansari](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@Naushad\_Ansari](https://discuss.elastic.co/u/Naushad_Ansari)\
**Post date:** [January 30, 2017, 9:31am UTC](https://discuss.elastic.co/t/logstash-5-with-kafka-input-plugin-4-1-1-not-decoding-avro-messages/73173/1 "2017-01-30T09:31:39Z")

</div>

I am using Logstash 5.1.2 with logstash-input-kafka 4.1.1 plugin to read Avro data from kafka version 0.9 but I am getting error after starting logstash and logstash stops.

I am using logstash-codec-avro 3.0.0-java. I am able to read message from kafka without avro codec. Below is my logstash config.

input {  
kafka {  
bootstrap\_servers =\> "server1:9092,server2:9092,server3:9092"  
topics =\> ["applogs"]  
group\_id =\> "logstash-1"  
codec =\> avro {  
schema\_uri =\> "schema.avsc"  
}  
}  
}

filter {  
date {  
match =\> ["ts","UNIX\_MS"]  
target =\> "@timestamp"  
timezone =\> "America/New\_York"  
}  
}

output {  
elasticsearch {  
hosts =\> ["host1:9200","host2:9200","host3:9200"]  
index =\> "logstash-applogs-%{+YYYY.MM.dd}-1"  
}  
}

Error Message:  
[2017-01-30T02:49:04,285][INFO][logstash.pipeline] Pipeline main started  
[2017-01-30T02:49:04,354][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}  
[2017-01-30T02:49:04,788][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<ArgumentError: negative length -1552376 given\>, :backtrace=\>["org/jruby/ext/stringio/StringIO.java:829:in `read'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:106:in`read'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:93:in `read_bytes'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:99:in`read\_string'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:299:in `read_data'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:362:in`read\_map'", "org/jruby/RubyFixnum.java:275:in `times'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:360:in`read\_map'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:308:in `read_data'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:384:in`read\_record'", "org/jruby/RubyArray.java:1613:in `each'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:382:in`read\_record'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:310:in `read_data'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/avro-1.8.1/lib/avro/io.rb:275:in`read'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/logstash-codec-avro-3.0.0-java/lib/logstash/codecs/avro.rb:73:in `decode'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-4.1.1/lib/logstash/inputs/kafka.rb:163:in`thread\_runner'", "file:/apps/logstash-5.1.2/vendor/jruby/lib/jruby.jar!/jruby/java/java\_ext/java.lang.rb:12:in `each'", "/apps/logstash-5.1.2/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-4.1.1/lib/logstash/inputs/kafka.rb:162:in`thread\_runner'"]}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 27, 2017, 9:32am UTC](https://discuss.elastic.co/t/logstash-5-with-kafka-input-plugin-4-1-1-not-decoding-avro-messages/73173/2 "2017-02-27T09:32:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
