Greetings Elastic Community !
I have an issue about my implementations of some JSON logs into Elasticsearch with a filebeat.
First i didn't used the parsers function, and so all the fields was not implemented and all the content was in a message filed in Elasticsearch.
Next I found out that i have to use the parsers function in my config file. But now i don't have any entries from Elasticsearch after this add. With the goods lines from my config file, do you have any ideas please ? Of course I'll add new lines from my config if you want and need. Thank you in advance !
filebeat.inputs:
- type: filestream
enabled: true
paths:
- /tmp/tests/*
parsers:
- ndjson:
keys_under_root: true
overwrite_keys: true