Fails Filebeat Input format data

[zero.lim (zero)]

Hi Everyone,

I used Filebeat to input the data of Aws Elb to Elk, but the input format was not what I wanted. He saved all the data to message field. . .

Is there any change to disassemble the information in the message???

Please Help....

many thanks ...

[MarianaD]

hi @zero.lim, did you use the filebeat aws module elb fileset for this? Can you provide us with the filebeat input/module configuration ?

[zero.lim (zero)]

Hi MarianaD,

Thanks for the help!

modules/aws.yml

- module: aws
elb:
  enabled: true
  var.queue_url: https://sqs.myregion.amazonaws.com/123456/myqueue
  var.credential_profile_name: aws-key 
  var.visibility_timeout: 300s

filebeat.yml

filebeat.inputs:
- type: s3
  queue_url: https://sqs.myregion.amazonaws.com/123456/myqueue
  credential_profile_name: aws-key 

many thanks