Logstash split long json with beats input

When long json log with xml insertion being processed in logstash it split one line into two with _jsonparefailure tag.

logstash 6.2.4
CentOS Linux release 7.4.1708 (Core)

  beats {
    port => 5001

filter {
    json {
      source => "message"

for example i have one json in application and see two messages in kibana

1 message

{"@timestamp":"2019-03-14T14:20:39.820+03:00", ...

2 message

... "operation":"Invoke create Request"}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.