# Logstasch eventlog event fieds is written to kafka in chinese

**URL:** <https://discuss.elastic.co/t/logstasch-eventlog-event-fieds-is-written-to-kafka-in-chinese/118818>\
**Category:** Logstash\
**Created:** [February 7, 2018, 11:08am UTC](https://discuss.elastic.co/t/logstasch-eventlog-event-fieds-is-written-to-kafka-in-chinese/118818 "2018-02-07T11:08:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gititc](https://avatars.discourse-cdn.com/v4/letter/g/f9ae1b/32.png) [@gititc](https://discuss.elastic.co/u/gititc)\
**Post date:** [February 7, 2018, 11:08am UTC](https://discuss.elastic.co/t/logstasch-eventlog-event-fieds-is-written-to-kafka-in-chinese/118818/1 "2018-02-07T11:08:36Z")

</div>

I'm trying to write event log messages from specific source to kafka.  
The problem is that all textual event fields are written to kafka in chinese.  
Because of that:

1. filter is not working (the if statement for specific source is wrong because source nume equals to chinese instead of real value)
2. when removing the filter all textual event fileds are shown in chinese in kafka.  
(writing just text works fine)  
tried also to add encoding without success.

here is my configuration:  
input {  
eventlog {  
logfile =\> 'Application'  
codec =\> plain{  
charset =\> 'Windows-31J'  
}  
}  
}

output {   
kafka {  
codec =\> "json"  
bootstrap\_servers =\> "10.1.70.101:9092"  
topic\_id =\> "eventlog"  
}  
}

and here is my output in kafka:

{"EventType":"湩潦浲瑡潩�","TimeGenerated":"2018-02-07T09:54:03.000Z","@version":"1","SourceName":"畏汴潯�","host":"m2044248-w7","Category":0,"ComputerName":"㉭㐰㈴㠴眭⸷汴⹶潧⹶汩","User":null,"EventIdentifier":63,"Logfile":"Application","@timestamp":"2018-02-07T11:04:33.524Z","RecordNumber":177273,"InsertionStrings":["桔⁥硅档湡敧眠扥猠牥楶散爠煥敵瑳䜠瑥灁䵰湡晩獥獴猠捵散摥摥‮"],"TimeWritten":"2018-02-07T09:54:03.000Z","Type":"湩潦浲瑡潩�","message":"桔⁥硅档湡敧眠扥猠牥楶散爠煥敵瑳䜠瑥灁䵰湡晩獥獴猠捵散摥摥�"}

I'll be very gratefull for your help !  
thanks,  
Gitit

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 7, 2018, 11:09am UTC](https://discuss.elastic.co/t/logstasch-eventlog-event-fieds-is-written-to-kafka-in-chinese/118818/2 "2018-03-07T11:09:02Z")

</div>

Closed on March 7, 2018, 11:09am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.