title: Sending json format log to kibana using filebeat, logstash and elasticsearch?
body: <p>I have logs like this:</p>
  
  <pre><code>{"logId":"57aaf6c8d32fb","clientIp":"127.0.0.1","time":"03:11:29 pm","uniqueSubId":"57aaf6c98963b","channelName":"JSPC","apiVersion":"v1","modulName":null,"actionName":"apiRequest","typeOfError":"","statusCode":"","message":"In Auth","exception":"In Auth","logType":"Info"}
  
  {"logId":"57aaf6c8d32fb","clientIp":"127.0.0.1","time":"03:11:29 pm","uniqueSubId":"57aaf6c987206","channelName":"JSPC","apiVersion":"v2","modulName":null,"actionName":"performV2","typeOfError":"","statusCode":"","message":"in inbox api v2 5","exception":"in inbox api v2 5","logType":"Info"}
  </code></pre>
  
  <p>I want to push them to <code>kibana</code>. I am using filebeat to send data to logstash, using following configuration:</p>
  
  <pre><code>filebeat.yml
  
   ### Logstash as output
  logstash:
  # The Logstash hosts
  hosts: ["localhost:5044"]
  
  # Number of workers per Logstash host.
  #worker: 1
  </code></pre>
  
  <p>Now using following configuration, I want to change codec type:</p>
  
  <pre><code>input {
  
       beats {
       port =&gt; 5000
       tags =&gt; "beats"
       codec =&gt; "json_lines"
       #ssl  =&gt; true
       #ssl_certificate =&gt; "/opt/filebeats/logs.example.com.crt"
       #ssl_key =&gt; "/opt/filebeats/logs.example.com.key"
       }
  
  
       syslog {
          type =&gt; "syslog"
          port =&gt; "5514"
  
      }
  
  }
  </code></pre>
  
  <p>But, still I get the logs in string format: </p>
  
  <blockquote>
    <p>"message":
    "{\"logId\":\"57aaf6c96224b\",\"clientIp\":\"127.0.0.1\",\"time\":\"03:11:29
    pm\",\"channelName\":\"JSPC\",\"apiVersion\":null,\"modulName\":null,\"actionName\":\"404\",\"typeOfError\":\"EXCEPTION\",\"statusCode\":0,\"message\":\"404
    page encountered
    http:\/\/localjs.com\/uploads\/NonScreenedImages\/profilePic120\/16\/29\/15997002iicee52ad041fed55e952d4e4e163d5972ii4c41f8845105429abbd11cc184d0e330.jpeg\",\"logType\":\"Error\"}",</p>
  </blockquote>
  
  <p>Please help me solve this.</p>