Logstash input displayed wrong in Kibana

Elastic Stack Logstash
1

I get \xC0\t\xC0\b\xC00\xC0/\xC0(\xC0'\xC0\u0014\xC0\u0013\xC0\u0012\u0000\x9D\u0000\x9C\u0000=\u0000<\u00005\u0000/\u0000 as message in Kibana when sending tcp input to logstash from IOS.

My logstash.conf is:
input {
tcp {
port => 5043
codec => json_lines
}
}

filter {
json {
source => "message"
}
}

output {
elasticsearch { hosts => ["localhost:9200"] }
stdout { codec => rubydebug }
}

Any help would be lovely :slight_smile:

2

What are you sending, exactly? What program and protocol?

3

We are using https://github.com/justeat/JustLog sending over TCP socket ... and it seems to connect fine but the data gets twisted. Not sure if it is SSL related

4

any idea ? have you seen it before ?

5

I don't know anything about JustLog. You need to figure out how to get it to send data in a format that we at least know what it is. The JustLog documentation didn't offer any details on how it sends the data or how Logstash should be configured so I can't help with that.

6

Hi Magnus
It was the ssl handshake not working. Did not have correctly created certs created. Fixed now :slight_smile:

/Tim

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.