[BUG] JSON parse error

[diegargon]

Describe the bug

Got this error

JSON.parse: expected ',' or '}' after property value in object at line 1 column 13008 of the JSON data

HttpFetchError@http://172....:5601/7326/bundles/core/core.entry.js:15:184257
fetchResponse@http://172...:5601/7326/bundles/core/core.entry.js:

After split the indexer the error was related to logs about windows-secuirty-mitigation (Windoes Event forward)

winlogbeat->logstash->opensearch

The rest works fine.

Related component

Indexing

To Reproduce

Loading
Discover->windows-security-mitigation logs

Expected behavior

No error.

Additional Details

Opensearch v 2.12.0

[dblock]

@diegargon Where are you getting this error? In winglogbeat? In logstash? How does one reproduce it?

[peternied]

[Triage - attendees 1 2 3 4 5 6]

@opensearch-project/admin Please transfer this to the OpenSearch Dashboards repository

[diegargon]

@diegargon Where are you getting this error? In winglogbeat? In logstash? How does one reproduce it?

as i already wrote searching with "Discovery" (opensearch-dashboard) and selecting that particular indexer/logs

If I empty the log, I might be able to see some log, but there's a specific event (that i cannot be seen) causing the failure shortly after.

[kavilla]

@diegargon, we have added some fixes related to this in 2.13. Could you verify if you are still experiencing this issue?

Here is the PR for the fix: #6253.

Will close this issue for now, if upgrading and if you find that this issue still exists please re-open and it will automatically add the untriaged label for visibility purposes.

Thank you!

[diegargon]

@kavilla Seems fixed (fast check), thanks.