If I have filebeat.yml file follow a file and send it to Elasticsearch it seems to work fine but if I use the inputs.d format then the message looks like it is binary. It could just be a font problem. I don't understand what is different.
I have this in the file in inputs.d directory:
- type: log enabled: true paths: - /logdata/filebeat/esx/host.example.com/* fields_under_root: true fields: noodle_hostname: host.example.com noodle_site: site exclude_files: ['.gz$']
but in Elasticsearch it looks like this:
Thanks for any help.