Hi, I have an issue with Filebeat, I have escaping characters that I can't remove from the message value, or I don't know how. I know there already are some topics on that matter but none solved my issue, that's why I'm allowing myself to open this one. Please kindly tell me if there is already a s…

[image] JeanN: I've tried the use of fields_under_root and json.keys_under_root set to true but none of that helped. fields_under_root only applies to the custom fields added with fields. json.keys_under_root is not supported by the httpjson input. Something you can try is to decode json alr…

Messages escaped in Filebeat

Elastic Stack Beats

aguida79 (Alejandro Guida) June 22, 2020, 8:45pm 6

Hi Jean,

Can you share your final config file of filebeat.yml to get MISP events? I don't want to use the MISP module too, is not working right for me.

Thanks in advance.

Regards,
Alejandro

Topic		Replies	Views
Filebeat adds escape character to message field. How to disable that? Beats filebeat	3	4174	June 6, 2017
Filebeat to logstash problem to parse json message Beats filebeat	7	1963	January 10, 2018
Filebeat JSON message Beats	3	5175	November 24, 2017
How filebeat handle json string with backslash Beats filebeat	5	3032	November 16, 2018
Message Field missing Beats filebeat	4	2615	April 12, 2017

Messages escaped in Filebeat

Related topics