I have 7.17v version, i see the apache server logs in filebeat kibana dashboard. But it gives the message with event.original instead of message. when i try to write a lucene query to search all GET req for example, it doesnt show any.
Basically it is not able to fetch if it is named as event.original. Could someone please suggest
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.