# Logstash Error: Unmatched first part of surrogate pair

**URL:** <https://discuss.elastic.co/t/logstash-error-unmatched-first-part-of-surrogate-pair/104859>\
**Category:** Logstash\
**Created:** [October 23, 2017, 8:05am UTC](https://discuss.elastic.co/t/logstash-error-unmatched-first-part-of-surrogate-pair/104859 "2017-10-23T08:05:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![AndreAga](https://avatars.discourse-cdn.com/v4/letter/a/ed8c4c/32.png) [@AndreAga](https://discuss.elastic.co/u/AndreAga)\
**Post date:** [October 23, 2017, 8:05am UTC](https://discuss.elastic.co/t/logstash-error-unmatched-first-part-of-surrogate-pair/104859/1 "2017-10-23T08:05:49Z")

</div>

Hi guys,  
Sometimes Logstash fails with this error and Logstash crashes:

`[FATAL][logstash.runner] An unexpected error occurred! {:error=>#<IOError: Unmatched first part of surrogate pair (0xd97b) (through reference chain: java.util.HashMap["DATA"]->org.logstash.ConvertedMap["message"]->org.logstash.bivalues.StringBiValue["javaValue()"])>, :backtrace=>["org/logstash/ackedqueue/ext/JrubyAckedQueueExtLibrary.java:150:in`write'", "/usr/local/logstash/logstash-core/lib/logstash/util/wrapped\_acked\_queue.rb:56:in `push'", "/usr/local/logstash/logstash-core/lib/logstash/util/wrapped_acked_queue.rb:376:in`push'", "/usr/local/logstash/logstash-core/lib/logstash/instrument/wrapped\_write\_client.rb:22:in `push'", "/usr/local/logstash/logstash-core/lib/logstash/instrument/wrapped_write_client.rb:38:in`record\_metric'", "/usr/local/logstash/logstash-core/lib/logstash/instrument/wrapped\_write\_client.rb:22:in `push'", "/usr/local/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-5.1.10/lib/logstash/inputs/kafka.rb:250:in`thread\_runner'", "/usr/local/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-json-3.0.4/lib/logstash/codecs/json.rb:48:in `from_json_parse'", "org/jruby/RubyArray.java:1613:in`each'", "/usr/local/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-json-3.0.4/lib/logstash/codecs/json.rb:48:in `from_json_parse'", "/usr/local/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-json-3.0.4/lib/logstash/codecs/json.rb:38:in`decode'", "/usr/local/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-5.1.10/lib/logstash/inputs/kafka.rb:241:in `thread_runner'", "file:/usr/local/logstash/vendor/jruby/lib/jruby.jar!/jruby/java/java_ext/java.lang.rb:12:in`each'", "/usr/local/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-kafka-5.1.10/lib/logstash/inputs/kafka.rb:240:in `thread_runner'"]}`

Logstash 5.5.3 with Kafka Input and Elasticsearch Output.  
OS:  
NAME="Red Hat Enterprise Linux Server"  
VERSION="7.2 (Maipo)"

Any suggestion?

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 20, 2017, 8:06am UTC](https://discuss.elastic.co/t/logstash-error-unmatched-first-part-of-surrogate-pair/104859/2 "2017-11-20T08:06:01Z")

</div>

Closed on November 20, 2017, 8:06am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.