Export .evtx to ES gives strange error in "Properties " field

Elastic Stack Elasticsearch
1

Hi Team, I'm new to ES. I'm using a power shell script to export saved Windows Event (syslog events) to Es directly. It work fine but If you check exported data by Kibana , in side event data "properties " field options are gray out and say "indexed fields can not be searched ".
I exacted "Properties" value and checked when it converted to Json. "properties" value contain strange error, show as below.

Properties : {System.Diagnostics.Eventing.Reader.EventProperty, System.Diagnostics.Eventing.Reader.EventProperty, System.Diagnostics.E
venting.Reader.EventProperty, System.Diagnostics.Eventing.Reader.EventProperty...}

Does anyone know how to fix this ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.