Hi all,
How can I avoid such messages:
[2017-10-02T12:57:26,652][WARN ][logstash.codecs.plain ] Received an event that has a different character encoding than you configured. {:text=>"<118>Oct 2 09:54:27 fw01-ips connection: Protocol: UDP, SrcIP: 172.16.19.150, DstIP: 192.112.36.4, SrcPort: 54281, DstPort: 53, Client: DNS, ApplicationProtocol: DNS, InitiatorPackets: 1, ResponderPackets: 1, InitiatorBytes: 74, ResponderBytes: 1143, DNSQuery: \x987\xEE\x87\xFB\u007F, DNSRecordType: an authoritative name server, DNSResponseType: No Error, DNS_TTL: 518400", :expected_charset=>"UTF-8"}
[2017-10-02T12:57:26,652][WARN ][logstash.codecs.plain ] Received an event that has a different character encoding than you configured. {:text=>"<118>Oct 2 09:54:27 fw01-ips connection: Protocol: UDP, SrcIP: 172.16.19.150, DstIP: 192.33.4.12, SrcPort: 54281, DstPort: 53, Client: DNS, ApplicationProtocol: DNS, InitiatorPackets: 1, ResponderPackets: 1, InitiatorBytes: 74, ResponderBytes: 1143, DNSQuery: \x98\xE7\xE2\xBC\u000E\u007F, DNSRecordType: an authoritative name server, DNSResponseType: No Error, DNS_TTL: 518400", :expected_charset=>"UTF-8"}
I think that DNSQuery is a reason of this error.