Yesterday I updated to Graylog 3.0, migrated one of my a linux graylog-sidecar with filebeat collector to GL3.0 Sidecar. The gl2_source_collector is setup fine in filebeat.yml, verified it’s sent with logstash, but it seems not to be seen by graylog, the search by gl2_source_collector field doesn’t work, making “Show messages” button in Sidecars section not working. Verified with kibana it’s not saved in messages
1 Like
I fixed it by moving to new beats input after i noticed old one is deprecated
1 Like
You can still use the “old” Beats input as long as you set fields_under_root to false in the filebeat configuration.
1 Like
that’s what i’ve done, because i’ve yet to migrate rest of my collectors
1 Like
Yeah, me too 
All 200+ of them. sigh
That’s really essential advice there… I hope it’s in the upgrade guide 
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.