Filebeat doc has both message and error.message fields

Elastic Stack Elasticsearch
1

I installed filebeat on several of my elastic cluster nodes and I am seeing docs from the (node)_server.json that have both a message field and an error.message field complaining about Provided Grok expressions do not match field value with the message information as well.

Is this normal?
If not how do I fix this?

Thanks in advance for your help.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.