Hi all.
I am testing filebeat on a minikube where I have a few pods and I send the logs to a local logstah and its job is to forward the logs to Elastic/kibana node on AWS.
I can see some fields in the logs like host.id and so on with the t as type but the kubernetes one like ? kubernetes.pod.name have the ? symbol.
Do you know why? Cause I can choose them when I try to create a visualization and so on.
Maybe metricbeat would be more appropriate for this purpose?
Cheers