No field "postgresql.log.level" frome Filebat Posresql module in Kibana

Hello! Just install filebeat (7.15.1)+postgresql module.
filebeat.yml:

output.logstash:
  hosts: ["logstash.test.com:5001","logstash2.test.com:5001"]
  loadbalance: true

fields:
  env: prod
  host_type: postgresql

fields_under_root: True

name: psql-prod1.test.com

logging.level: info
logging.to_files: true
logging.files:
  path: /var/log/filebeat
  name: filebeat
  keepfiles: 14
  permissions: 0644

filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml

filebeat/modules.d/posgresql.yml:

# Module: postgresql
# Docs: https://www.elastic.co/guide/en/beats/filebeat/7.x/filebeat-module-postgresql.html

- module: postgresql
  # All logs
  log:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths: ["/var/lib/pgsql/*/com/log/*.log*"]

I can see logs in Kibana, but there are no field log.level, but in message field I see FATAL, LOG, INFO and another levels. How I can move it in log.level field?

Hi @sadux

Here is a grok pattern used to parse logs, might be that logs format does not math this patter.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.