Tab character in json input message is not validated and complete message gets wrapped in the message field in elastic search

Elastic Stack Elasticsearch
1

input json message to logstash via filebeat is
"{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service_id":"logger","message":"(tab space)shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}"

ouptut in Elasticsearch:
"message" : "{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service_id":"logger","message":"\tshaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}",

How can we avoid \t in message with proper validation?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.