# Format issue using http output plugin to send logs from logstash to azure eventhub

**URL:** <https://discuss.elastic.co/t/format-issue-using-http-output-plugin-to-send-logs-from-logstash-to-azure-eventhub/309073>\
**Category:** Logstash\
**Created:** [July 7, 2022, 5:24am UTC](https://discuss.elastic.co/t/format-issue-using-http-output-plugin-to-send-logs-from-logstash-to-azure-eventhub/309073 "2022-07-07T05:24:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shakib\_farooq](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shakib_farooq/32/101917_2.png) [@Shakib\_farooq](https://discuss.elastic.co/u/Shakib_farooq)\
**Post date:** [July 7, 2022, 5:24am UTC](https://discuss.elastic.co/t/format-issue-using-http-output-plugin-to-send-logs-from-logstash-to-azure-eventhub/309073/1 "2022-07-07T05:24:47Z")

</div>

Hello,

I am facing an issue in forwarding logs from logstash to the event hub, below is the conf file. the requirement is to forward winlog beats logs to the event hub.  
I am receiving logs in elastic if I kept the format filed as "message" but the logs are not readable, I tried to change the format field to JSON but then I'm not able to receive logs in elastic.

Thanks

```auto
input { 
  beats {
     port => 5099
}
 }

filter {}

output {
 #stdout { codec => rubydebug }
 
 http {
 url => "https://namespace.windows.net/eventhub/messages"
  content_type => "application/x-www-form-urlencoded"
  http_method => "post"
  format => "message"
  headers => {
    "Host" => "namespace.servicebus.windows.net"
    "Authorization" => " ***********"
  }
 }
}

```

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [July 7, 2022, 6:02am UTC](https://discuss.elastic.co/t/format-issue-using-http-output-plugin-to-send-logs-from-logstash-to-azure-eventhub/309073/2 "2022-07-07T06:02:02Z")

</div>

You are using https and I don't see certs params in your output http.

Easiest way is to set ssl\_verification\_mode =\> "none". Latter add full cert structure.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 4, 2022, 6:02am UTC](https://discuss.elastic.co/t/format-issue-using-http-output-plugin-to-send-logs-from-logstash-to-azure-eventhub/309073/3 "2022-08-04T06:02:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.