If I have filebeat.yml file follow a file and send it to Elasticsearch it seems to work fine but if I use the inputs.d format then the message looks like it is binary. It could just be a font problem. I don't understand what is different.
I have this in the file in inputs.d directory:
- type: log
enabled: true
paths:
- /logdata/filebeat/esx/host.example.com/*
fields_under_root: true
fields:
noodle_hostname: host.example.com
noodle_site: site
exclude_files: ['.gz$']
but in Elasticsearch it looks like this:
Thanks for any help.
Peter