Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] v2.12.0 Discover Search Error with specific document data #6081

Closed
russelllang opened this issue Mar 8, 2024 · 2 comments
Closed

[BUG] v2.12.0 Discover Search Error with specific document data #6081

russelllang opened this issue Mar 8, 2024 · 2 comments
Labels
bug Something isn't working

Comments

@russelllang
Copy link

Describe the bug
After upgrade to OpenSearch Dashboards v2.12.0, Discover when viewing a logstash-* index pattern would fail with
Search Error
SyntaxError: Expected ',' or '}' after property value in JSON at position 325 (line 1 column 326)
at fetch_Fetch.fetchResponse (http://localhost:5601/7326/bundles/core/core.entry.js:15:191557)
at async interceptResponse (http://loocalhost:5601/7326/bundles/core/core.entry.js:15:186457)
at async http://localhost:5601/7326/bundles/core/core.entry.js:15:189424

This only occurred when documents from one logging source were returned in the search results.

It appears to be triggered by a long number in the message, when it is surrounded by commas.

Fails with this document in the search results:
curl -k -u admin -XPOST "https://localhost:9200/logstash-2024.03.07/_bulk" -H 'Content-Type: application/json' -d '{"create": {"_index":"logstash-2024.03.07"}}
{"@timestamp":"2024-03-08T10:14:00+11:00","message":"2024-03-08T10:14:00+11:00,7327474782641898010,","severity":"info","facility":"user","hostip":"127.0.0.1","host":"localhost"}
'

Works Ok with this document:
curl -k -u admin -XPOST "https://localhost:9200/logstash-2024.03.07/_bulk" -H 'Content-Type: application/json' -d '{"create": {"_index":"logstash-2024.03.07"}}
{"@timestamp":"2024-03-08T10:12:00+11:00","message":"2024-03-08T10:12:00+11:00,7327474782641898010","severity":"info","facility":"user","hostip":"127.0.0.1","host":"localhost"}
'
Search error does not occur when the long number 7327474782641898010 is removed, or the commas on either side are removed.
Problem did not occur with v2.11.1.
Current workaround is using fluentd to remove commas from this logging source before sending to Opensearch.

OpenSearch Version
v.2.12.0

Dashboards Version
v.2.12.0

Host/Environment (please complete the following information):
Ubuntu 22.04.4
Chrome or Edge (current)

@russelllang russelllang added bug Something isn't working untriaged labels Mar 8, 2024
@manasvinibs
Copy link
Member

This has been fixed as part of this PR #5956

@manasvinibs
Copy link
Member

Duplicate of #5923

@manasvinibs manasvinibs marked this as a duplicate of #5923 Mar 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants