I have JSON logs that i would like to send to ElasticSearch with filebeat, but when i do, all the fields in the JSON do not actually become searchable fields in ES/Kibana. How do i make the fields from the JSON into search fields that i can use with timelion, visualizations, etc?
You can use the decode_json_fields processor in Filebeat.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.