Configuração do filebeat para mapear objetos JSON em linhas de log

filbeat.yml

filebeat.inputs:

# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.

- type: log

  # Change to true to enable this input configuration.
  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /app/logs/*.log
  
  json.keys_under_root: true

  processors:
  - decode_json_fields:
      fields: ['message', 'level', 'log']
      target: json