logfellow/logstash-logback-encoder

v7.3 merges individual json log records together resulting in a string intermittently. v5.3 works as expected. AWS/EKS hosted application to splunk

stmiller14 opened this issue · 2 comments

Describe the bug
A clear and concise description of what the bug is.
Intermittent issue where aws application write logs to splunk in json format. Logs are getting sent and incorrect format however intermittent issue occurs where logs will be merged into one splunk record and lose its json structre. Happens between 5-10% of logs with no pattern detected
To Reproduce
Steps to reproduce the behavior:

  1. Use this logback.xml configuration...
  2. Execute this logger statement (e.g. logger.debug(...)) ...
  3. See error, or unexpected output
    host application in aws within eks. write json logs to splunk

Expected behavior
A clear and concise description of what you expected to happen.
json logs records should not be merged together.

  • what output did you expect

Additional context
Add any other context about the problem here.

  • logstash-logback-encoder version 7.3
  • logback version 1.3.5
  • jackson version 2.14.2
  • java version 17

Please provide your logback configuration

This issue has been automatically closed because there has been no response to our request for more information from the original author. With only the information that is currently in the issue, we don't have enough information to take action. Please reach out if you have or find the answers we need so that we can investigate further.