Thanks for your reply @oranieri !
unfortunately I added this line to the config in the attempt to fix the logs.. The data still appears to be shown as either encoded/encrypted despite removing the codec line within my logstash config.
It appears this is a duplicated issue as Message Format problem for logstash but the solution is not clear.
I am running elk stack using https://github.com/deviantony/docker-elk docker-compose file.
If I test my filebeat configuration using - sudo filebeat -e -c /etc/filebeat/filebeat.yml -d "*"
I receive logs in a readable format. This makes me believe my filebeat config is ok.
If I view the packets of data received on port 5000 of my elk stack server - tcpdump -i ens192 port 5000 -Xvv - the data received is not readable and I think hex encoded??
x09e0: 4230 5bfa 2388 e412 8450 2c2f 96af 38e7 B0[.#....P,/..8.
0x09f0: 3cf9 d6da d772 2914 57f2 fb43 7cff e1ed <....r).W..C|...
0x0a00: c787 e8d9 8e8d ece4 0f7b d7f9 13db f90d .........{......
0x0a10: fbe2 0f7b d7f9 d3fd 71b8 72ed d086 4627 ...{....q.r...F
Best,
Guy