Filebeat decode_json_fields processor keeps giving convert error for GCP module

Elastic Stack Beats
1

I keep getting an error that says GoError: failed in processor.convert: conversion of field [json.protoPayload] to type [[unset]] with target field [json] failed: field [json.protoPayload] is missing: key not found when using the decode_json_fields processor as follows:

processors:
  - decode_json_fields:
      fields: ["message"]

The log format already has a message key with a JSON string as it's value when I see it on Kibana without the processor, but when I add the processor it keeps giving me the GoError on convert when I don't use anything related to convert?

Help appreciated.
FYI: I'm using Filebeat 7.13

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.