Filebeat data extra Fields not populating in raw logs

There are some additional log variables that I want ingesting into my logstash. I have the logs ingesting and can see the Event Hub Beats just fine. But these specific values that I will be able to spot within event hub do not show up at all.

Is there some special checkbox or radio button that needs to get toggled or some additional setting in either the eventhubbeat or filebeat that I need in order to retrieve even more data out?

Hi! Could you list some of the specific values that are missing please?

Thank you for your response, sadly a new issue cropped up. Originally I would not see the proper data coming through at all, the uuids were not matching and the timestamps were not either. Now I get this:

Authorization: REDACTED

RESPONSE Status: 409 The specified blob already exists.
->, /go/pkg/mod/!azure/azure-storage-blob-go@v0.8.0/azblob/zc_storage_error.go:42
===== RESPONSE ERROR (ServiceCode=BlobAlreadyExists) =====
Description=The specified blob already exists.
RequestId: . . .
Time:2020-12-21T17:42:57.5087896Z, Details:
Code: BlobAlreadyExists
Authorization: REDACTED

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.