Hi, On kibana when I forwarded the logs I don't see like message id or message fields and a parsed fields, I just see this event_data.param. How can I send in the proper format? This is the raw json. Our flow loks like this: Client -> Indexerserver -> elastic search -> kibana Should be the mes…

Event_data.param# instead of the correct fields

andrewkroh (Andrew Kroh) August 31, 2018, 5:01pm 2

Please read my response in Generically named event_data.paramN on Windows XP and 2003. I think it explains what you are seeing.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.