I have used tutorial for parsing nginx logs from Kibana tutorial page: http://localhost:5601/app/kibana#/home/tutorial/nginxLogs?_g=() for DEB system. And everthing is working fine. But in Kibana all my logs have two version. One is version with timestamp from message field and the another one with timestamp of indexing in ElasticSearch. There is my filebeat.yml:
filebeat.inputs: - type: log enabled: true paths: - /var/log/nginx/*log filebeat.config: modules: path: /etc/filebeat/modules.d/*.yml output.elasticsearch: hosts: ["localhost:9200"] setup.kibana: host: "localhost:5601"
I simply want have only one type og logs(with timestamp from message field).