Remove backslash from Json logs in Kibana

Elastic Stack Beats
,
1 
filebeat.inputs:
- type: log
  paths:
   - '/var/lib/docker/containers/*/*.log'
  multiline.type: pattern
  multiline.pattern: '^\\'
  multiline.negate: true
  multiline.match: after

  processors:
  - add_docker_metadata: ~

output.elasticsearch:
  hosts: [""]
  username: "elastic"
  password: "j0rC5nyrOuAK5oal4sC39nf8"

I'm trying to read Docker logs and store in Kibana. But for some reason it's reading the "" and adding it in Kibana. Need to remove it.

"log":"{\"log.level\":\"info\",\"@timestamp\":\"2022-03-13T03:22:42.272Z\",\"log.logger\":\"esclientleg\",\"log.origin\":{\"file.name\":\"eslegclient/connection.go\",\"file.line\":284},\"message\":\"Attempting to connect to Elasticsearch version 8.0.1\",\"service.name\":\"filebeat\",\"ecs.version\":\"1.6.0\"}\n","stream":"stderr","time":"2022-03-13T03:22:42.2731553Z"}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.