# Issue with kibana log data

**URL:** <https://discuss.elastic.co/t/issue-with-kibana-log-data/214230>\
**Category:** Kibana\
**Created:** [January 8, 2020, 12:14pm UTC](https://discuss.elastic.co/t/issue-with-kibana-log-data/214230 "2020-01-08T12:14:04Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Guy\_Rawsthorn](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guy_rawsthorn/32/60475_2.png) [@Guy\_Rawsthorn](https://discuss.elastic.co/u/Guy_Rawsthorn)\
**Post date:** [January 9, 2020, 10:29am UTC](https://discuss.elastic.co/t/issue-with-kibana-log-data/214230/3 "2020-01-09T10:29:01Z")

</div>

Thanks for your reply @oranieri !

unfortunately I added this line to the config in the attempt to fix the logs.. The data still appears to be shown as either encoded/encrypted despite removing the codec line within my logstash config.

It appears this is a duplicated issue as [Message Format problem for logstash](https://discuss.elastic.co/t/message-format-problem-for-logstash/54612) but the solution is not clear.

I am running elk stack using [https://github.com/deviantony/docker-elk](https://github.com/deviantony/docker-elk) docker-compose file.

If I test my filebeat configuration using - sudo filebeat -e -c /etc/filebeat/filebeat.yml -d "\*"  
I receive logs in a readable format. This makes me believe my filebeat config is ok.

If I view the packets of data received on port 5000 of my elk stack server - tcpdump -i ens192 port 5000 -Xvv - the data received is not readable and I think hex encoded??

x09e0: 4230 5bfa 2388 e412 8450 2c2f 96af 38e7 B0[.#....P,/..8.  
0x09f0: 3cf9 d6da d772 2914 57f2 fb43 7cff e1ed \<....r).W..C|...  
0x0a00: c787 e8d9 8e8d ece4 0f7b d7f9 13db f90d .........{......  
0x0a10: fbe2 0f7b d7f9 d3fd 71b8 72ed d086 4627 ...{....q.r...F

Best,  
Guy

---

_[View the full topic](https://discuss.elastic.co/t/issue-with-kibana-log-data/214230)._