Column event.dataset is empty

Elastic Stack Elasticsearch
1

Hi,

Inside ELK when goes to check the logs (/app/logs/stream) column "event.dataset" is empty but if I click on certain event (View Details) the value of "fields.event.dataset" are correctly informed (mylog)
Value of "fields.event.dataset" is the same as "event.dataset" ?

I use this:

filebeat.inputs:  
- type: log
  enabled: true
  fields:
    level: debug
    event.dataset: mylog

How can I solve or check this?

Thanks in advance

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.