Filebeat doesn't providing event fields (event.name,event.module...) doesnt

Elastic Stack Beats
1

HI , I'm using filebeat sending logs to the logstash but i can't see event fields like

event.name,event.module

example

{
 "input" => {
 "type" => "log"
 },
 "agent" => {
 "hostname" => "solrc-stg1",
 "id" => "69b413db-221a-4362-8ac8-624092b11811",
 "ephemeral_id" => "c222c99f-5737-4d4f-8295-89f6fae34007",
 "type" => "filebeat",
 "version" => "7.6.1"
 },
 "@timestamp" => 2020-03-16T21:12:07.806Z,
 "ecs" => {
"version" => "1.4.0"

 "log" => {
 "file" => {
 "path" => "/var/log/messages"
 },
 "offset" => 6218088
 },
 "@metadata" => {
 "ip_address" => "192.168.127.230",
 "version" => "7.6.1",
 "type" => "_doc",
 "beat" => "filebeat",
 "index" => "other_data"
 },
 "@version" => "1",
 "host" => {
 "hostname" => "solrc-stg1",
 "os" => {
 "kernel" => "3.10.0-693.el7.x86_64",
 "codename" => "Core",
 "name" => "CentOS Linux",
 "family" => "redhat",
 "version" => "7 (Core)",
 "platform" => "centos"
 },
 "containerized" => false,
 "name" => "solrc-stg1",
 "id" => "139d5f1344b040e8a80b3da09ac47779",
 "architecture" => "x86_64"
 },
 "message" => "Mar 16 23:12:01 solrc-stg1 systemd: Started Session 22716 of user devuser.",
 "tags" => [
 [0] "beats_input_codec_plain_applied"

why filebeat is not providing those event fields ?

Thanks is advance.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.