Logstash parsing XML failing on second and subsequent records

I suspect you are hitting this issue. The file input reads lines, and splitting the data into lines happens before the codec (and encoding) is applied, so it cannot properly process 16 bit characters.