I’ve installed the NRIA and set up log forwarding from running Docker containers using systemd. The Docker log driver is
journald. The log forwarding works, but my log events are missing the
I am outputting JSON logs, and when I look at the entire log event, I can see the JSON fields being parsed properly, e.g.
But it looks like NR is looking for the
message field, not
MESSAGE, so the
message column is empty for all of my logs. What am I doing wrong here?