-
Notifications
You must be signed in to change notification settings - Fork 45
Description
Strangest bug ever.
I was loosing logs in logstash and I was able after a lot of testing to relate it to the fact I was sending the following structure:
{
....
"payload": {
"data": {
"id": {...}
}
}
...
}
If the id field is either, null or a string if works or if it is an object it cant be named id, any variant works (Id, iD, ID, _id} .
This is hard to deal with since we are logging messages that I can't change.
I am trying several solutions but still nothing until this moment.
This may be some kind of selector if the parser that is causing the problem if I send:
{
....
"payload": {
"data": {
"data": {
"id": {...}
}
}
}
...
}
It works.
Hope you can reproduce the issue.
The main problem is that the log disappears from the queries search not appearing in the dashboard.