Filebeat fields

Hi all.
I am testing filebeat on a minikube where I have a few pods and I send the logs to a local logstah and its job is to forward the logs to Elastic/kibana node on AWS.

I can see some fields in the logs like and so on with the t as type but the kubernetes one like ? have the ? symbol.
Do you know why? Cause I can choose them when I try to create a visualization and so on.

Maybe metricbeat would be more appropriate for this purpose?


ok. I had to refresh the index and it's all ok now.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.