# Configure logstash to recieve logs from Openshift 4 and fluentdForward

**URL:** https://discuss.elastic.co/t/configure-logstash-to-recieve-logs-from-openshift-4-and-fluentdforward/276012
**Category:** Logstash
**Created:** [June 15, 2021, 2:00pm UTC](https://discuss.elastic.co/t/configure-logstash-to-recieve-logs-from-openshift-4-and-fluentdforward/276012 "2021-06-15T14:00:41Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![sudden74](https://avatars.discourse-cdn.com/v4/letter/s/8797f3/32.png) [@sudden74](https://discuss.elastic.co/u/sudden74)
#### Post date: [June 15, 2021, 2:00pm UTC](https://discuss.elastic.co/t/configure-logstash-to-recieve-logs-from-openshift-4-and-fluentdforward/276012/1 "2021-06-15T14:00:41Z")

</div>

We have configured the fluentdForward on Openshift 4.7 to send logs to an external ELK stack. Logs are arriving to logstash but we are not able to decode the messages correctly. It looks like the special characters are replaced with some escaped hex codes (xCDx\xF0\xDE\u0000\u0018).

How should the input in logstash look like?

Just using a plain one now:

```auto
input {
  tcp {
    id => "logs"
    port => 13360
    add_field => {
      "Environment" => "testlogs"
    }
  }
}

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 13, 2021, 2:01pm UTC](https://discuss.elastic.co/t/configure-logstash-to-recieve-logs-from-openshift-4-and-fluentdforward/276012/2 "2021-07-13T14:01:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.