Added space in Logs from Filebeat

[schurd (Dietmar Schurr)]

Hello everybody,
a Windows System delivers via Filebeat and the (deprecated) Sidecar Collectors files to the Graylog Cluster.
For some log files this works fine, but for a newly added log file it does not really work.
The message arrives in Graylog, but after each character there is an added space.
I get this:
6 0 6 4 S A P - 3 0 5 5 3 - I C L E 0 0 5 0 5 6 A 4 5 A 9 F 1 E D A 8 F 8 5 2 B A 7 A 8 4 7 2 0 0 5 - T 2 4 5 0 9 7 7 4 6 _ 1
instead of this:
6064 SAP-30553-ICLE005056A45A9F1EDA8F852BA7A8472005-T245097746_1
That’s strange, isn’t it?
What could be the problem?
Graylog ist the version 3.1.4, the Collector is 0.1.7.

Thanks in advance,
Dietmar Schurr

[tmacgbay]

You could try updating to the most recent non-depreciated sidecar… Graylog Non-legacy Sidecar

If you look through my other posts I have put up working windows filebeat configurations…