Since Fluent Bit v1.2 we are not suggesting the use of decoders (Decode_Field_As) if you are using Elasticsearch database in the output to avoid data type conflicts.
note that slashes are replaced with dots.
the transformation above do not modify the original Tag, just creates a new representation for the filter to perform metadata lookup.
\n(LF or 0x10). When composing Yaml files for a Helm chart always enable the multiline mode, example: