Functionbeat reached End of Support on October 18, 2023. You must consider moving your deployments to the more versatile and efficient Elastic Serverless Forwarder.

« Publishing to Logstash fails with "connection reset by peer" message Not sure whether to use Logstash or Beats »

› › ›

@metadata is missing in Logstash

edit

@metadata is missing in Logstash

edit

Logstash outputs remove @metadata fields automatically. Therefore, if Logstash instances are chained directly or via some message queue (for example, Redis or Kafka), the @metadata field will not be available in the final Logstash instance.

To preserve @metadata fields, use the Logstash mutate filter with the rename setting to rename the fields to non-internal fields.

« Publishing to Logstash fails with "connection reset by peer" message Not sure whether to use Logstash or Beats »