Configure logstash to recieve logs from Openshift 4 and fluentdForward

We have configured the fluentdForward on Openshift 4.7 to send logs to an external ELK stack. Logs are arriving to logstash but we are not able to decode the messages correctly. It looks like the special characters are replaced with some escaped hex codes (xCDx\xF0\xDE\u0000\u0018).

How should the input in logstash look like?

Just using a plain one now:

input {
  tcp {
    id => "logs"
    port => 13360
    add_field => {
      "Environment" => "testlogs"
    }
  }
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.