I'm trying to aggregate my docker-compose logging environment using the fluentD driver, fluent, elastic, kibana.
The logs forward properly but the nested JSON objects each get recorded as a single event (see image).
Is the proper method here to structure the data using custom regex?
I have the following in my fluentd.conf
<source>
type forward
port 24224
bind 0.0.0.0
</source>
<match docker.**>
type elasticsearch
logstash_format true
logstash_prefix logstash
host elasticsearch
port 9200
flush_interval 5s
</match>