Hello,
I am using filebeat on Windows 10 sending logs to a remote server. But lines are not decoded correctly.
Files are on hex format if I use this configuration on filebeat.yaml ;
# ------------- MSSQL -------------
filebeat.modules:
- module: mssql
log:
enabled: true
var.paths: ['Z:\Audit\*.sqlaudit']
Files are not correctly decoding if I use this configuration on filebeat.yaml ;
# ------------- MSSQL -------------
filebeat.modules:
- module: mssql
log:
enabled: true
var.paths: ['Z:\Audit\*.sqlaudit']
input:
encoding: utf-16le
multiline.pattern: '^\d\d'
multiline.negate: true
multiline.match: after