microsoft / AzureFunctionforSplunkVS

An Azure Function to make Azure Monitor telemetry available to a Splunk monitoring system.
MIT License
50 stars 75 forks source link

Parsing issues #26

Closed gregorybrown-disney closed 3 years ago

gregorybrown-disney commented 4 years ago

Starting this week I have been getting the following error for 99% of the events in the eventhub. zAfter parsing a value an unexpected character was encountered: {. Path 'records[0].properties', line 1, position 3757. Obviously the records[0] changes and the position change.

I tried to pull from the eventhub and parse in python and notice 3 issues with the events coming from the eventhub. I'm not sure if this is related to the parsing issue I am seeing in your function app, but the positions are in similar spots.

I have to remove the following as it makes the json invalid: }{"correlationId":"XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX","pageNumber":0,"isEnd":true}}]} I also have to remove quotation marks in the following: '}}**"**}},{', '}}}},{' {"requestbody":**"**{"Id":

Is there something that needs to be updated within the function app, or do you think I'm running in to a separate issue?