Hi all, I was wondering if you could help me with this issue. I'm using the TCP Raw input on Logstash and the message I need to capture and parse is JSON encoded, the problem is that the TCP message ends with "0d 0d", i.e., "\r\r" instead of a \n newline character, so logstash is not catching the message at all... Is there a way to circumvent this issue? This is the raw message I receive:
0000 7b 22 73 74 22 3a 22 41 63 63 65 73 73 69 6f 6e {"st":"Accession
0010 22 2c 22 68 22 3a 22 45 41 53 5f 53 50 5f 65 61 ","h":"EAS_SP_ea
0020 73 31 20 28 65 61 73 31 61 29 20 22 2c 22 74 22 s1 (eas1a) ","t"
0030 3a 31 34 37 33 36 39 32 34 39 33 31 33 33 2c 22 :1473692493133,"
0040 74 69 64 22 3a 34 36 2c 22 73 69 64 22 3a 22 32 tid":46,"sid":"2
0050 31 38 32 22 2c 22 65 69 64 22 3a 22 43 61 6c 6c 182","eid":"Call
0060 20 66 61 69 6c 65 64 22 2c 22 75 69 64 22 3a 22 failed","uid":"
0070 61 65 35 66 62 37 33 33 65 31 31 34 37 37 35 36 ae5fb733e1147756
0080 22 2c 22 64 6e 22 3a 22 31 31 32 31 31 30 39 39 ","dn":"11211099
0090 35 34 22 2c 22 65 6e 76 22 3a 7b 22 62 74 22 3a 54","env":{"bt":
00a0 31 34 37 30 39 32 37 30 34 34 30 30 30 2c 22 63 1470927044000,"c
00b0 72 62 22 3a 22 6f 6e 65 70 6c 75 73 22 2c 22 63 rb":"oneplus","c
00c0 70 63 22 3a 22 22 2c 22 64 65 76 22 3a 30 2c 22 pc":"","dev":0,"
00d0 64 76 22 3a 22 41 30 30 30 31 22 2c 22 63 70 64 dv":"A0001","cpd
00e0 22 3a 22 70 6f 72 74 61 6c 2d 74 65 6c 2e 74 65 ":"portal-tel.te
00f0 6c 65 63 65 6e 74 72 6f 2e 6e 65 74 2e 61 72 22 lecentro.net.ar"
0100 2c 22 6d 66 22 3a 22 4f 6e 65 50 6c 75 73 22 2c ,"mf":"OnePlus",
0110 22 6d 6f 64 22 3a 22 41 30 30 30 31 22 2c 22 6f "mod":"A0001","o
0120 73 22 3a 22 41 6e 64 72 6f 69 64 22 2c 22 6f 73 s":"Android","os
0130 76 22 3a 22 35 2e 31 2e 31 22 2c 22 70 74 22 3a v":"5.1.1","pt":
0140 22 47 53 4d 22 2c 22 70 72 64 22 3a 22 41 63 63 "GSM","prd":"Acc
0150 65 73 73 69 6f 6e 4d 6f 62 69 6c 65 22 2c 22 74 essionMobile","t
0160 7a 22 3a 2d 33 2c 22 76 22 3a 22 32 2e 32 31 2e z":-3,"v":"2.21.
0170 30 33 22 2c 22 64 6e 22 3a 22 31 31 32 31 31 30 03","dn":"112110
0180 39 39 35 34 22 2c 22 69 6d 65 69 22 3a 22 38 36 9954","imei":"86
0190 34 35 38 37 30 32 34 30 34 33 38 36 32 22 7d 2c 4587024043862"},
01a0 22 70 22 3a 7b 22 63 69 64 22 3a 22 5a 4e 43 63 "p":{"cid":"ZNCc
01b0 69 38 4d 74 6c 53 33 33 4e 74 6f 53 75 6a 6c 5a i8MtlS33NtoSujlZ
01c0 6b 38 71 56 59 61 79 76 6c 4e 36 52 22 2c 22 73 k8qVYayvlN6R","s
01d0 69 70 22 3a 35 30 33 2c 22 64 69 72 22 3a 22 6f ip":503,"dir":"o
01e0 75 74 22 2c 22 65 72 72 22 3a 22 53 49 50 22 2c ut","err":"SIP",
01f0 22 6e 77 69 22 3a 7b 22 73 73 69 64 22 3a 22 54 "nwi":{"ssid":"T
0200 4c 43 20 57 69 66 69 22 2c 22 62 73 73 69 64 22 LC Wifi","bssid"
0210 3a 22 35 38 3a 62 36 3a 33 33 3a 33 36 3a 30 36 :"58:b6:33:36:06
0220 3a 32 63 22 2c 22 72 73 73 69 22 3a 2d 34 34 2c :2c","rssi":-44,
0230 22 63 6f 6e 22 3a 31 2c 22 6d 61 63 22 3a 22 63 "con":1,"mac":"c
0240 30 3a 65 65 3a 66 62 3a 32 37 3a 36 36 3a 34 30 0:ee:fb:27:66:40
0250 22 2c 22 6e 77 22 3a 22 77 69 66 69 22 2c 22 61 ","nw":"wifi","a
0260 64 64 22 3a 22 5c 22 54 4c 43 20 57 69 66 69 5c dd":""TLC Wifi
0270 22 22 2c 22 67 77 22 3a 22 31 30 30 2e 37 36 2e "","gw":"100.76.
0280 32 35 35 2e 32 35 34 22 2c 22 6c 73 22 3a 34 33 255.254","ls":43
0290 33 7d 7d 2c 22 69 70 73 76 22 3a 22 31 38 31 2e 3}},"ipsv":"181.
02a0 34 37 2e 32 35 30 2e 31 37 30 22 7d 0d 0d 47.250.170"}..
As you can see, it ends with 0d 0d...
Thanks!