I am using filbeat as input and Elastic search as output.
using json filter to parse json msgs.
But I dont see output coming in proper json format (preety print) in Kibana .
I tried with Ruby filter to print preety json and can see output well kibana but logstash logs throws ruby exception
[logstash.filters.ruby ] Ruby exception occurred: A JSON text must at least contain two octets!
If I am not wrong, this comes if logstash tries to parse empty string.
few questions:
- why with json filter , I don't see preety print output?
- any other way than ruby filter ?
- how to handle empty msgs?