The events in JSON are not breaking properly. Every once in an hour I'll get a few event that are like 60+ event in one.
are you using any props.conf ?
Mostly, the payload has some additional data which prevents it from JSON auto parsing.
Please try to use the regex to break the event in props.conf
please give us a sample event type for more analysis