if you’re using filebeat and your

.log

file is just plaintext json, the issue is with filebeat, not with osqueryd…