Hi!
It seems to be similar to Why Filebeat returns Unicode character code instead of XML tag symbol under message, it is showing like \u003c and \u003e - #8 by manjsr. I wonder if there was a fix for the other issue or not. Could you check how the events are logged in your console and see if the strings are escaped there or not? If we verify that escape_html doesn't work we can open a GH for this so as to have the team work on fix.
C.