# Read line error: decoding docker JSON: EOF - autodiscover docker with bad json

**URL:** https://discuss.elastic.co/t/read-line-error-decoding-docker-json-eof-autodiscover-docker-with-bad-json/135429
**Category:** Beats
**Created:** [June 11, 2018, 8:17pm UTC](https://discuss.elastic.co/t/read-line-error-decoding-docker-json-eof-autodiscover-docker-with-bad-json/135429 "2018-06-11T20:17:00Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![toyssan1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/toyssan1/32/32132_2.png) [@toyssan1](https://discuss.elastic.co/u/toyssan1)
#### Post date: [June 11, 2018, 8:17pm UTC](https://discuss.elastic.co/t/read-line-error-decoding-docker-json-eof-autodiscover-docker-with-bad-json/135429/1 "2018-06-11T20:17:00Z")

</div>

Running filebeat version 6.2.4 with the autodiscover prospector for docker.

If the docker container restarts(crashes) creating a bad entry in the log file, filebeat gets stuck on the bad json entry

Example:

{"log":"2018-06-11 20:13:30 v2.8.2 [index] INFO: Kafka Subscriber\n","stream":"stdout","time":"2018-06-11T20:13:30.75194521Z"}  
{"log":"2018-06-11 20:13:31 v2.8.2 [index] INFO: Kafka Subscriber: {"log":"2018-06-11 20:13:32 v2.8.2 [indexing] INFO: Kafka Subscriber: Caught up to latest: topic\n","stream":"stdout","time":"2018-06-11T20:13:31.52812067Z"}

As you can see, the first line is valid, the second line is invalid json. This will cause this error:  
Read line error: decoding docker JSON: EOF; File: %!(EXTRA string=/var/lib/docker/containers/d58108f8c27171773c69995571430f3b90a33afe789b0464f33b48677e790522/d58108f8c27171773c69995571430f3b90a33afe789b0464f33b48677e790522-json.log)

I need filebeat to just ignore the bad entry and keep going. Instead it hangs and we will lose log data unless we go remove any bad line.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 9, 2018, 11:21pm UTC](https://discuss.elastic.co/t/read-line-error-decoding-docker-json-eof-autodiscover-docker-with-bad-json/135429/3 "2018-07-09T23:21:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.