# Winlogbeat Sending Bad Json Message

**URL:** <https://discuss.elastic.co/t/winlogbeat-sending-bad-json-message/315271>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [September 27, 2022, 2:16pm UTC](https://discuss.elastic.co/t/winlogbeat-sending-bad-json-message/315271 "2022-09-27T14:16:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rohit\_Kumbhar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rohit_kumbhar/32/67682_2.png) [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Post date:** [September 27, 2022, 2:16pm UTC](https://discuss.elastic.co/t/winlogbeat-sending-bad-json-message/315271/1 "2022-09-27T14:16:02Z")

</div>

Hi @elastic Team,

All versions are 7.16.2

My Setup is Winlogbeat(logstash output)=\>(beats input)collector(logstash TCP output)=\> (tcp input)loadbalancer(elastic output)

I am able to receive most of the data from server but some of the messages I am getting \_jsonparsefailure

At Collector output we have json\_lines codec  
and at loadbalancer we have json codec as input

Following is message that is not getting parsed from winlogbeat

Attaching screenshot snippet because its very long message cant fit all in body

 ![Screenshot 2022-09-27 at 7.44.29 PM](https://us1.discourse-cdn.com/elastic/original/3X/9/6/964c44109576ae12f7a6d81380ba02b72a6a3396.jpeg)

Thanks !!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 25, 2022, 4:17pm UTC](https://discuss.elastic.co/t/winlogbeat-sending-bad-json-message/315271/2 "2022-10-25T16:17:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.