# Zoom Webhook sending null characters to Splunk

**URL:** <https://devforum.zoom.us/t/zoom-webhook-sending-null-characters-to-splunk/28139>\
**Category:** API and Webhooks\
**Created:** [August 25, 2020, 5:36pm UTC](https://devforum.zoom.us/t/zoom-webhook-sending-null-characters-to-splunk/28139 "2020-08-25T17:36:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sbl](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/sbl/32/13805_2.png) [@sbl](https://devforum.zoom.us/u/sbl)\
**Post date:** [August 25, 2020, 5:36pm UTC](https://devforum.zoom.us/t/zoom-webhook-sending-null-characters-to-splunk/28139/1 "2020-08-25T17:36:17Z")

</div>

**Description**  
We implemented logging from Zoom to our SPLUNK instance via Zoom Marketplace JWT app. Unfortunately in SPLUNK we are seeing lots of null chars and those are creating an issue during the ingestion of the logs.

It is causing our Splunk indexer to crash and stop injesting logs. We have to restart to get them flowing again.

**Error**  
Please see an example below:

`{"event": "meeting.sharing_ended", "payload": {"object": {"uuid": "r0pFZE8wS4+senRhu9f3sA==", "participant": {"id": "", "user_id": "16778240", "user_name": "f3sA==,,16778240\![Screen Shot 2020-08-25 at 10.35.22 AM|690x490](upload://6cIpUt6XxmbwdW2xADarZuOKFUd.png) \u0000\u0000\u0002\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000`

\<continued with the null characters for 20k or so\>

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
Webhook

**Which Endpoint/s?**  
Splunk

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:  
Enable the Splunk Zoom app and send logs to if via Zoom Webhook

**Screenshots (If applicable)**  
If applicable, add screenshots to help explain your problem.

**Additional context**  
We opened a ticket with zoom support and they told us they can’t help us and to reach out to the developer forum. Full details here with notes INC01298695.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [August 27, 2020, 10:10pm UTC](https://devforum.zoom.us/t/zoom-webhook-sending-null-characters-to-splunk/28139/2 "2020-08-27T22:10:46Z")

</div>

Hey @sbl,

Thanks for reporting this. Our engineering team is looking into the issue and I will get back to you with an update. (ZOOM-191161)

-Tommy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [September 27, 2020, 8:10am UTC](https://devforum.zoom.us/t/zoom-webhook-sending-null-characters-to-splunk/28139/3 "2020-09-27T08:10:50Z")

</div>

Closed on September 27, 2020, 8:10am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.