Multiple blackslash in log output

This post was flagged by the community and is temporarily hidden.

That looks like you are processing a message, encoding it, then processing it again and encoding it recursively maybe 16 times. That is, either in filebeat or logstash, or the two together, the same file is being used as an input and an output.

What are the non-comment lines in the filebeat and logstash configurations?

Thank you for your reply, here is the current configuration for both

Filebeat config

apiVersion: v1
kind: ConfigMap
metadata:
  name: filebeat-config
  namespace: cma-logging
  labels:
    k8s-app: filebeat
data:
  filebeat.yml: |-
    filebeat.autodiscover:
      providers:
        - type: kubernetes
          node: ${NODE_NAME}
          hints.enabled: true
          hints.default_config:
            type: container
            paths:
              - /xxx/data/docker/containers/*${data.kubernetes.container.id}.log
    
    processors:
      - add_host_metadata:
      - add_kubernetes_metadata:

    output.logstash:
      hosts: ['logstash-service:5044']
---

Logstash config

apiVersion: v1
kind: ConfigMap
metadata:
  name: logstash-configmap
  namespace: cma-logging
data:
  logstash.yml: |
    http.host: "0.0.0.0"
    path.config: /usr/share/logstash/pipeline
    pipeline.batch.size: 50
    pipeline.batch.delay: 50
  logstash.conf: |
    input {
      beats {
        port => 5044
      }
    }
    filter {
      grok {
        match => { "message" => "%{TIMESTAMP_ISO8601:logdate} \[%{DATA:traceId}\] \[%{DATA:threadId}\] \[%{DATA:application}\] %{LOGLEVEL:level} %{SPACE}%{GREEDYDATA:raw}" }
      }
      if "_grokparsefailure" in [tags] {
        drop { }
      }
      date {
        match => [ "logdate" , "yyyy-MM-dd HH:mm:ss.SSS" ]
      }
    }
    output {
      elasticsearch {
          hosts    => "https://elasticsearch.xxx.com:443"
          proxy    => "http://172.30.60.46:80"
          index    => "cma-non-prod"
          user     => "xxx"
          password => "yyy"
      }
      stdout { codec => rubydebug }
    }