Webhdfs output writes not all fields

Elastic Stack Logstash
1

Hi, community, I'm using webhdfs to write my logstash events to hdfs. But in hdfs I see only part of initial messages.
In logstash:

{"@timestamp":"2021-08-19T07:45:33.373Z","eventtype":"166","program":"Hostd","@version":"1","logsource":"esxi","message":"<166>2021-08-19T07:45:33.373Z esxi Hostd: info hostd[4028326] [Originator@6876 sub=Default] IPMI SEL sync took 0 seconds 0 sel records, last 255\n","timestamp":"2021-08-19T07:45:33.373Z","esxi_message":"info hostd[4028326] [Originator@6876 sub=Default] IPMI SEL sync took 0 seconds 0 sel records, last 255\n"}

In hdfs I see only this:

2021-08-19T07:45:33.373Z %{host} <166>2021-08-19T07:45:33.373Z esxi Hostd: info hostd[4028326] [Originator@6876 sub=Default] IPMI SEL sync took 0 seconds 0 sel records, last 255

How to make logstash write all my json message to hdfs?

2

using codec=>"json" in output

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.