"ERR Dropping event: key=message: key not found" using "add_docker_metadata"

Hi,
trying this:
https://www.elastic.co/blog/enrich-docker-logs-with-filebeat
(but with Kafka output plugin)
I get A LOT of:
client.go:108: ERR Dropping event: key=message: key not found
error messages.

No idea where look for.

Any help?

Could you please share your configuration and debug logs? Please format them using </>.

I'm using Filebeat in a Docker container (running on CoreOS Linux).
This is filebeat.yml:
https://pastebin.com/WCKqpZjF
(sorry for external link)

Any help to generate debug logs using Filebeat in a container?

Start filebeat in the foreground and enable debug logging:

./filebeat -e -d "*"

Probably due to:
codec.format:
string: 'beat=%{[beat]} message=%{[message]}'
in output.kafka.

I apologize for attributing it to add_docker_metadata and thanks for lesson about debugging!

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.