Winlogbeat Sending Bad Json Message

Rohit_Kumbhar · September 27, 2022, 2:16pm

All versions are 7.16.2

My Setup is Winlogbeat(logstash output)=>(beats input)collector(logstash TCP output)=> (tcp input)loadbalancer(elastic output)

I am able to receive most of the data from server but some of the messages I am getting _jsonparsefailure

At Collector output we have json_lines codec
and at loadbalancer we have json codec as input

Following is message that is not getting parsed from winlogbeat

Attaching screenshot snippet because its very long message cant fit all in body

Thanks !!

system · October 25, 2022, 4:17pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Help parsing ndjson as json using json filter Logstash	9	586	April 30, 2024
Winlogbeat -> Logstash -> JsonFile -> Logstash -> EL Logstash	1	380	March 22, 2017
Trying to understand json parsing of Winlogbeats logs Logstash	3	783	March 17, 2020
Winlogbeat and Logstash Input Codec Beats winlogbeat	5	6795	April 12, 2016
Problem parsing Json from Beats Logstash	2	2164	August 28, 2017