Cannot get custom fields to load in Filebeat

Elastic Stack Logstash
1

Hello,

I am having issues getting my logs parsed correctly in filebeat. In short, none of my custom fields (created by grok) are being loaded into the filebeat indicies page. The logs are being passed successfully but they are not being parsed accordingly. I have the latest ELK stack and filebeat. I followed the following to get it setup: https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-centos-7

2

Hello,

The issue I am having is still occurring. I have tried different templates as well. It is not a grok issue since this grok has proven successful on a older version of logstash that I am running (using log-courier).

Any thoughts?

Thanks

3

I am having same issue..,none of my custom fieldnames come up on dashboard..Is there a way to fix this?

4

I'm having the same issue as well. Any update on this?

5

What do you get? Show your configuration and the result of a stdout { codec => rubydebug } output.