Setting up logs functionality with fluentd

[Mary92]

@Kerry

Hi @Erik_Tribou,

The xpack.infra.sources.default.fields.message configuration option is broken at present.

Currently, the UI uses a heuristic to attempt to generate the log message for a number of known Filebeat modules. After this we fallback to the message and @message fields of the document. kissanime

If you ingest your logs with a message or @message field you should see your logs in the Logs UI.

You might be able to[setup a field alias for this if that's an easier route. In 6.5 this is only possible if the index uses the setting index.mapping.single_type: true.

Apologies for this, we are looking to extend configuration of the Logs UI in the future.

Thank you so much for this post..