Xml filter sometimes fails to parse files that have valid xml

Elastic Stack Logstash
1

I have the following xml - alot many of them, in fact.

<log>
  <message>
    <text>T1</text>
  </message>
  <message>
    <text>T2</text>
  </message>
</log>

Sometimes I see that the multiline code doesn't reach the end of the file. Because of this xml filter fails citing parsing error. The size of the file was <2MB with 50k lines.

I was able to parse bigger files without any issue. I see this sporadically.

I have set the following in multiline codec as a precaution.
max_lines => 10000000
max_bytes => '200 MiB'

Nothing seems to work. I am not able to reproduce the issue consistently in the same file also. Any ideas?

2

Hi Can I get an answer?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.