# Filebeat 7.10 aws cloudtrail is not parsing the output as shown in documentation

**URL:** https://discuss.elastic.co/t/filebeat-7-10-aws-cloudtrail-is-not-parsing-the-output-as-shown-in-documentation/298111
**Category:** Beats
**Tags:** beats-module, filebeat
**Created:** [February 24, 2022, 3:54am UTC](https://discuss.elastic.co/t/filebeat-7-10-aws-cloudtrail-is-not-parsing-the-output-as-shown-in-documentation/298111 "2022-02-24T03:54:15Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Anwar](https://avatars.discourse-cdn.com/v4/letter/a/53a042/32.png) [@Anwar](https://discuss.elastic.co/u/Anwar)
#### Post date: [February 24, 2022, 3:54am UTC](https://discuss.elastic.co/t/filebeat-7-10-aws-cloudtrail-is-not-parsing-the-output-as-shown-in-documentation/298111/1 "2022-02-24T03:54:15Z")

</div>

Hi,

I have configured aws clodutrail module using filebeat to push the logs to Elasticsearch. Logs are pushed to the elk. But am facing two issues.

1. Messages are showing in string instead of json
2. If i used processor and changed message to string. But the dashboard for cloudtrail is not satisfied with default ingest grok pattern.  
Please help me to view the output in dashboard.

---

<div class="post-metadata">

### Author: ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)
#### Post date: [February 24, 2022, 5:21am UTC](https://discuss.elastic.co/t/filebeat-7-10-aws-cloudtrail-is-not-parsing-the-output-as-shown-in-documentation/298111/2 "2022-02-24T05:21:19Z")

</div>

Can u show what ur getting? The original message should be in `event.original`. Can you show any errors or log messages from Filebeat?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 24, 2022, 5:21am UTC](https://discuss.elastic.co/t/filebeat-7-10-aws-cloudtrail-is-not-parsing-the-output-as-shown-in-documentation/298111/3 "2022-03-24T05:21:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
