Winlogbeat Sending Bad Json Message

Rohit_Kumbhar · September 27, 2022, 2:16pm

All versions are 7.16.2

My Setup is Winlogbeat(logstash output)=>(beats input)collector(logstash TCP output)=> (tcp input)loadbalancer(elastic output)

I am able to receive most of the data from server but some of the messages I am getting _jsonparsefailure

At Collector output we have json_lines codec
and at loadbalancer we have json codec as input

Following is message that is not getting parsed from winlogbeat

Attaching screenshot snippet because its very long message cant fit all in body

Thanks !!

system · October 25, 2022, 4:17pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.