Greetings Elastic Community !
I have an issue about my implementations of some JSON logs into Elasticsearch with a filebeat.
First i didn't used the parsers function, and so all the fields was not implemented and all the content was in a message filed in Elasticsearch.
Next I found out that i have to use the parsers function in my config file. But now i don't have any entries from Elasticsearch after this add. With the goods lines from my config file, do you have any ideas please ? Of course I'll add new lines from my config if you want and need. Thank you in advance !
filebeat.inputs: - type: filestream enabled: true paths: - /tmp/tests/* parsers: - ndjson: keys_under_root: true overwrite_keys: true