# Reading Data From Kafka and use filter json fails with ParserError

**URL:** https://discuss.elastic.co/t/reading-data-from-kafka-and-use-filter-json-fails-with-parsererror/132179
**Category:** Logstash
**Created:** [May 16, 2018, 4:38pm UTC](https://discuss.elastic.co/t/reading-data-from-kafka-and-use-filter-json-fails-with-parsererror/132179 "2018-05-16T16:38:12Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [May 16, 2018, 4:54pm UTC](https://discuss.elastic.co/t/reading-data-from-kafka-and-use-filter-json-fails-with-parsererror/132179/2 "2018-05-16T16:54:33Z")

</div>

> [@paano](#):
>
> 05/15/2018 13:21:28:464 Caller=WORK Operator=work Message=GetRelationship Version=005 Service=RelationshipServer Server=localhost KeyCnt=1 Key=D1231231-3-2, MsgId=6e3e3f84-3f49-496d-a287-3b277a598538 ElapsedTime=64

That is not valid JSON. I would handle that event with dissect and kv. The separators in dissect and the field\_split character are tabs.

```
  dissect { mapping => { "message" => "%{ts} %{+ts} %{restOfLine}" } }
  kv { source => "restOfLine" field_split => " " }

```

---

_[View the full topic](https://discuss.elastic.co/t/reading-data-from-kafka-and-use-filter-json-fails-with-parsererror/132179)._