Logstash split long json with beats input

[Sergey.k (Sergey)]

When long json log with xml insertion being processed in logstash it split one line into two with _jsonparefailure tag.

logstash 6.2.4
CentOS Linux release 7.4.1708 (Core)

input{
  beats {
    port => 5001
  }
}

filter {
    json {
      source => "message"
    }
}

for example i have one json in application and see two messages in kibana

1 message

{"@timestamp":"2019-03-14T14:20:39.820+03:00", ...

2 message

... "operation":"Invoke create Request"}