I use logspout v3.2.6 by gliderlab to route docker logs to Logstash 6.6.2. But the characters were scrambled. I tried many codes and charset nothing seems working. Need help.
I will share the configurations and logs for your reference below.
Logstash log
[2019-03-28T00:05:21,900][WARN ][logstash.codecs.line ] Received an event that has a different character encoding than you configured. {:text=>"\\xC4\\xC8QanRJL=1i\\xC0>;\\xE8 \\x8A0\\xC6\\xE8i\\xB3\\x91\\xCDJP\\u0014\\xBD\\xFE\\xA8U\\xEC\\a|\\xE6\\xB0\\u0014߶\\xCC\\xCFz\\xECX\\u00009o\\x9F\\x94\\xD5=\\xAE\\xB3\\\"\\u001E\\xF6ʦ:q\\xFA\\xA9i\\x9E\\u007F~F\\u007F\\xCA\\u0014\\xDD\\xCC\\u00172R\\xCCy\\xA1\\xBA\\xB3NT#i\\xCD\\xCC6\\xC5к\\xCFr\\u0002\\\\\\x99a\\u00174\\xA4\\xD4\\xC6ޟ\\u0017\\xDD\\xCBzOE\\xA0\\xC6o\\xF1\\xE2,w\\u0099\\xF9\\x82\\xFCG\\x89\\xE7\\xB2\\xC6\\u000F\\xAD\\x8C\\xC6\\u000FJ\\xE5n\\x9D\\xB9/\\x86\\x9E0\\u001A\\xA3֤O\\u007F\\\\\\xEE\\xEB\\\"\\xD6\\xCFMs\\xF1\\xEFcy\\xD8\\xD2\\u001Dc\\x83\\x91\\xB80u\\x8FK$\\u0003\\x89L{\\xD8j\\xE7\\a\\xDC\\xE3&\\xE7C\\x8A\\x8EL\\xAB\\xEBL\\xE8\\x9A\\xFB\\xAF\\xBF\\xB0\\xB5ЗN\\xFF-\\x93\\xB8\\x8Cj\\vR27\x9C\xCF+\xB6(y2\xEA\xD0\xD6*\u0019\xB3\xE1hNl\x86\rыKy\xEC\u0003\xE2\xB8͙\xE1p#TQ\xD7\xC5H\xCE\u0010\xEAn\xCC_\xA66!\xFB\xCA\xF4\xCBH\xA8\x83\xE8n\xB6\xAAR\xD6\xC3\xC1q\xFC]\r\u0003\u001C1',>\x8A&[\x84\u0001\u0019\x83@\xDFg\xE9\xAC,\u0002\x90\a\u0003\x94n\xCE2+$\u001C\x8A\u0000Ou\xEB\xCB/Ms\xF1Ϝ\b\xA0\xBAUꝵ9\vɠș\xF9\x9E\x8D@", :expected_charset=>"UTF-8"}`
Logstash configuration
input {
udp{
port => 5000
codec => json { charset => "UTF-8" }
}
tcp{
port => 5044
}
}
filter {
}
output {
elasticsearch {
hosts => "http://localhost:9200"
user => "admin"
password => "admin"
}
}