Filebeat fields

Hi all.
I am testing filebeat on a minikube where I have a few pods and I send the logs to a local logstah and its job is to forward the logs to Elastic/kibana node on AWS.

I can see some fields in the logs like host.id and so on with the t as type but the kubernetes one like ? kubernetes.pod.name have the ? symbol.
Do you know why? Cause I can choose them when I try to create a visualization and so on.

Maybe metricbeat would be more appropriate for this purpose?

Cheers

ok. I had to refresh the index and it's all ok now.
Cheers

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.