fluentd does not keep the origin message?

[Robert Chen]

fluentd just creates the fields after parsing,

but it does not include the origin message as a field?

thanks,

Robert

[tagp...@gmail.com]

I'm not sure if understood your question well!

Maybe following command works atleast for time key

keep_time_key true

[Robert Chen]

say my original message is:

2018-02-21 11:59:51,425 [ajp-nio-8009-exec-61] INFO  com.paymentus.spring.interceptors.SessionInterceptor - afterCompletionRequest[76] [Action: PayStartController, Path: /rotp/./pay-start.action, RCID: 8071838478, USR: CONSUMER, GID: 0, CID: 8071838478, SID: 357B18F4B012B058B0ACC04EEB8E4A21.uat_be-p08, CSRF: 1519232391359-96ee13a7ff7a90a32362e5d61a7fa748] elapsedTime 66 ms

In elasticsearch, I do not see the message field, see picture attached. 

[Naresh]

I also have the same question, were you able to figure out how to accomplish this?