Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Incomplete JSON ingested.

$
0
0
Hi, I am using the REST API modular input addon to monitor an elasticsearch instance on the stats api endpoint. The output is in JSON format and has an average of 1200 lines. I am using Heavy Forwarders and I have the following settings inputs.conf [rest://elastic-stats] source = elastic-stats auth_type = none endpoint = http://localhost:9200/_nodes/stats http_method = GET index = main index_error_response_codes = 0 polling_interval = 60 request_timeout = 55 response_type = json sequential_mode = 0 sourcetype = elastic-stats streaming_request = 0 props.conf [elastic-stats] SHOULD_LINEMERGE = false LINE_BREAKER = {"cluster_name": category = json_no_timestamp pulldown_type = 1 disabled = false elasticsearch api endpoint json output contains : Total Character Total Word Total Lines Size 26793 2230 1229 27.36 KB But only the first 10000 characters get indexed. Please assist & thank you in advance.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>