Hi all, I'm using a structured logging package for Go ( https://github.com/sirupsen/logrus ) and using Filebeat to ship to our ES cluster. Unfortunately, all the structured fields we're exposing with logrus get wrapped up in a "msg" field that I believe Filebeat creates. This makes us unable to query…

How can I expose new fields embodied in top-level fields?

cjcenizal (CJ Cenizal) October 12, 2016, 11:12pm 2

Hi Kpam,

I'm assuming this question is a duplicate of How can I expose new fields sourced from the log record??

Thanks,
CJ

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.