JSON logs in filestream input not added correctly on Elasticsearch

Greetings Elastic Community !

I have an issue about my implementations of some JSON logs into Elasticsearch with a filebeat.

First i didn't used the parsers function, and so all the fields was not implemented and all the content was in a message filed in Elasticsearch.
Next I found out that i have to use the parsers function in my config file. But now i don't have any entries from Elasticsearch after this add. With the goods lines from my config file, do you have any ideas please ? Of course I'll add new lines from my config if you want and need. Thank you in advance !


- type: filestream
enabled: true
    - /tmp/tests/*
  - ndjson:
keys_under_root: true
overwrite_keys: true

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.