Bad event clubbed together with good events in bad s3 bucket

[vikramcse44]

During enrichment process, some of the good events are clubbed with a bad event. When we decode and look into the bad bucket data then we find the good events are also clubbed with a bad event. This problem is also been seen after decoding the bad event from kibana.
Is there any solution by which we can get only single bad events in bad s3 bucket ?

Please help on this.

[alex]

This has been discussed recently, in this thread:

POSTed bad events, are they all dropped?

Looking to reprocess some bad events, and we are sending in batches of 50 from the collectors through a POST. When there is 1 bad event in the batch, is the whole batch dropped? I can see in the bad events the line includes them all, invalid or not, but just not sure if the ones that were good were actually passed on or not. Cheers