I am using filebeat to route log data from my machine to Elasticsearch.
The log-files contain multiple lines with every line being one JSON object literal.
I want each line to become an event with as many fields as there are properties.
But so far this only works partly. Every JSON object literal becomes an event in the index but then the whole line is just put into one field called "message".
Is this a mapping problem or configuration problem? Can anyone help?
Thanks in advance