Did replace fluentd/logstash with filebeat. Use filebeat on 6.2 version and works well, filebeat-prospector with following config. Explaining: type docker did not work, because json in json problem, error messages with parsing that. With type log works good, got result in elasticsearch. data: kub…

Filebeat logfile property expansion json

tom.stark (Tom Stark) March 5, 2018, 10:50am 4

@tudor - any idea to solve my issue? Could a elasticsearch preprocessing solve that?

Topic		Replies	Views
Filebeat not parsing json in messages Beats filebeat	10	6806	June 5, 2018
Help needed: Filebeat Container input > Elasticsearch >Kibana Beats docker , filebeat	12	5154	October 22, 2019
Filebeat fails to process kibana json logs "failed to format message from *json-.log "in a kubernetes enviroment Logs	17	4520	February 21, 2019
Filebeat 6.2.3 in Kubernetes : Read line error: decoding docker JSON Beats filebeat	13	2078	July 6, 2018
Parse JSON data with filebeat Beats filebeat	8	60923	April 24, 2017