@metadata is missing in Logstash
Logstash outputs remove @metadata
fields automatically. Therefore, if Logstash instances are chained directly or via some message queue (for example, Redis or Kafka), the @metadata
field will not be available in the final Logstash instance.
Tip
To preserve @metadata
fields, use the Logstash mutate filter with the rename setting to rename the fields to non-internal fields.