How to configure Filebeat to consume logs in JSON format that are already in ECS format

Hi,

I am new to Elastic and struggling with configuring Filebeat to read logs in JSON that are already in the Elastic Common Schema format.

I was inspired by the https://github.com/elastic/ecs-dotnet/tree/master/src/Elastic.CommonSchema.NLog project. When properly configured NLog should emit ECS formatted JSON messages to the log file, one message per line.

How to configure Filebeat to get them and send to Elastic? I assume logs need no processing as they are already in ECS format, just send to Elastic.

How to achieve that? Any guidance welcome :slight_smile:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.