Double values filebeat


I'm trying to read my log server.json into logstash /kibana. Now I have opened a topic for this before, and I was advised to ask further questions in the filebeat forum. For the record.

I've already gotten a little further than my first problem I had in the previous topic.

Currently kibana shows double values I think (see image, marked with a red circle )

This is my filebeat.yml

- type: log
  enabled: true
    - /opt/rh/eap7/piet/usr/share/wildfly/standalone/log/server.json
#  multiline.pattern: '^{'
  multiline.pattern: '^$'
  multiline.negate: true
  multiline.match: after
#  - decode_json_fields:
#      fields: ["message"]
#      target: "json"
  hosts: [""]

The # are a result of my trail and error method. I have no clear reasons why I did that.. (sorry i am new in the IT)

and this is my logstash file.

input {
    beats {
        port => "5044"
filter {
    json {
        source => "message"
        hosts => ["localhost:9200"]
        index => "data"

I may be doing something wrong. Unfortunately, I haven't been working in IT for very long. My filebeat.yml is based on some reading and some cutting and pasting (trial and error and it looks better then before). I'm a bit further, but it would be nice if I didn't get double values. Hopefully someone can help me.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.