You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
cc @cmacknz
Currently, filebeat with the shipper output is producing a large number of gRPC marshalling errors:
{"log.level":"error","@timestamp":"2023-01-19T20:43:04.427Z","message":"18/249: \"failed to convert event fields to protobuf: proto: invalid type: []string\", dropped","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"service.name":"filebeat","ecs.version":"1.6.0","log.logger":"shipper","log.origin":{"file.line":210,"file.name":"shipper/shipper.go"},"ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2023-01-19T20:43:04.427Z","message":"19/249: \"failed to convert event fields to protobuf: proto: invalid type: []string\", dropped","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log.logger":"shipper","log.origin":{"file.line":210,"file.name":"shipper/shipper.go"},"service.name":"filebeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2023-01-19T20:43:04.427Z","message":"20/249: \"failed to convert event fields to protobuf: proto: invalid type: []string\", dropped","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"service.name":"filebeat","ecs.version":"1.6.0","log.logger":"shipper","log.origin":{"file.line":210,"file.name":"shipper/shipper.go"},"ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2023-01-19T20:43:04.428Z","message":"21/249: \"failed to convert event fields to protobuf: proto: invalid type: []string\", dropped","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log.logger":"shipper","log.origin":{"file.line":210,"file.name":"shipper/shipper.go"},"service.name":"filebeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2023-01-19T20:43:04.428Z","message":"22/249: \"failed to convert event fields to protobuf: proto: invalid type: []string\", dropped","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"service.name":"filebeat","ecs.version":"1.6.0","log.logger":"shipper","log.origin":{"file.line":210,"file.name":"shipper/shipper.go"},"ecs.version":"1.6.0"}
Looks like this is happening in convertMapStr() in shipper/shipper.go, presumably this switch block needs more cases so we can convert []string to []interface :
switch v := value.(type) {
case mapstr.M:
protoValue, err = convertMapStr(v)
default:
protoValue, err = helpers.NewValue(v)
}
cc @cmacknz
Currently, filebeat with the shipper output is producing a large number of gRPC marshalling errors:
Looks like this is happening in
convertMapStr()inshipper/shipper.go, presumably this switch block needs more cases so we can convert[]stringto[]interface: