All Apps and Add-ons
Highlighted

Receiving JSON error while trying to set up a connection to MQTT Modular Input app

New Member

Can someone give me an idea what this error message means in relation to the MQTT Modular Input?

10-23-2017 12:29:59.378 +1100 ERROR JsonLineBreaker - JSON StreamId:12467227541764018490 had parsing error:Unexpected character: ':' - datasource="mqtt://VM1", datahost="Libellium", datasourcetype="json"

Trying to set up a connection to an existing broker.

0 Karma
Highlighted

Re: Receiving JSON error while trying to set up a connection to MQTT Modular Input app

Ultra Champion

That is not an error message from the MQTT Mod Input.

The Splunk sourcetype "_json" , does not like something in your received JSON.

I'd try a custom sourcetype, see what gets indexed and what is possibly malformed in the JSON.

0 Karma
Highlighted

Re: Receiving JSON error while trying to set up a connection to MQTT Modular Input app

Influencer

I suspect your JSON data does not wrap attribute names and values in double quotes, which is how Splunk expects it to pass json validation. But it's just a guess.

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.