Logstash中的消息格式

Question

I am viewing my logstash output and it has:

u0002\\xp\\\\\

characters.

I want to be able to view only understandable charsets. What changes should I have in my config file?

Answer 1

You should take a look at the codecs, eg the JSON codec . Here you can set a charset depending on the encoding of your input.

Example usage (for ISO-8859-1 charset):

input {
    file {
        path => [ "/path/to/logs" ]
        codec => json { charset => "ISO-8859-1" }
    }
}