@Tek_Chand I will try to take a look. There is a couple things either use Logstash Parsing or the Filebeat Module using both is probably not a great approach. I would recommend using the filebeat modules approach. I / We can show you how to use Logstash as a Pass Through if you still want to use…