Skip to main content
Solved

non-unsigned-integral type given for backstory.Network.sent_bytes: int 103454713"

  • November 19, 2025
  • 1 reply
  • 19 views

JSpoorSonic
Forum|alt.badge.img+9

Hey there,

 

I have some issues with a custom parser, and it’s erroring out with 

panic encountered: non-unsigned-integral type given for backstory.Network.sent_bytes: int 103454713"

 

     if ![no_bytes] {
mutate {
replace => {
"event1.idm.read_only_udm.network.received_bytes" => "%{srcbytes}"
"event1.idm.read_only_udm.network.sent_bytes" => "%{dstbytes}"}
}
mutate {
convert => {
"event1.idm.read_only_udm.network.received_bytes" => "integer"
"event1.idm.read_only_udm.network.sent_bytes" => "integer"}
}
}
}

 

If I don’t do the convert, it errors out on “   “string 103454713”

 

Thank you in advance.

 

 

Best answer by JSpoorSonic

solved, the convert needed to be uinteger, not integer

1 reply

JSpoorSonic
Forum|alt.badge.img+9
  • Author
  • Bronze 3
  • Answer
  • November 20, 2025

solved, the convert needed to be uinteger, not integer