Graylog 3.0 Sidecar no `gl2_source_collector` field?

Yesterday I updated to Graylog 3.0, migrated one of my a linux graylog-sidecar with filebeat collector to GL3.0 Sidecar. The gl2_source_collector is setup fine in filebeat.yml, verified it’s sent with logstash, but it seems not to be seen by graylog, the search by gl2_source_collector field doesn’t work, making “Show messages” button in Sidecars section not working. Verified with kibana it’s not saved in messages

1 Like

I fixed it by moving to new beats input after i noticed old one is deprecated

1 Like

You can still use the “old” Beats input as long as you set fields_under_root to false in the filebeat configuration.

1 Like

that’s what i’ve done, because i’ve yet to migrate rest of my collectors

1 Like

Yeah, me too :slight_smile: All 200+ of them. sigh

That’s really essential advice there… I hope it’s in the upgrade guide :slight_smile:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.