Anybody help me about Regex for parsing stack trace in my Log pattern?

This is my log pattern:

2020-10-27 00:02:24.021 [http-nio-8080-exec-42] [|78CDD621831532CBD69F2F3DEF1859DC|-] DEBUG c.q.u.checkpoint.CheckpointFilter CheckpointFilter.afterRequestProcessing(...) (CheckpointFilter.java:112) - HTTP END request /endpoint/envelope. Time total: 1974  backend: 0 
2020-10-27 00:02:41.151 [http-nio-8080-exec-33] [|2D598C0CF0FC730ACD8603C5C0B77A88|-] DEBUG c.q.u.checkpoint.CheckpointFilter CheckpointFilter.afterRequestProcessing(...) (CheckpointFilter.java:112) - HTTP END request /endpoint/envelope. Time total: 31318  backend: 0 
2020-10-27 00:02:42.074 [http-nio-8080-exec-41] [|78CDD621831532CBD69F2F3DEF1859DC|-] ERROR v.c.v.i.bank.odata.ODataClient ODataClient.executeHttpRequest(...) (ODataClient.java:548) - CIF[1079610] USERNAME[myndp2016] TOKEN[FFIHASHendqyc/51i1vlAVk26zCDI6VTOTH4vNHXz1YY954XZU=] ErrorAPI [http://10.36.55.21/cb/odata/services/transferservice/Transfers?action=verify] CONTENT '{"error":{"code":"BE","message":{"lang":"en","value":"{\"errorMessage\":\"Hệ thống đang tổng hợp dữ liệu cuối ngày, quý khách vui lòng thử lại sau.\",\"errorCode\":2020042205,\"errorKey\":\"Error2020042205_descr\"}"}}}'
2020-10-27 00:02:42.076 [http-nio-8080-exec-41] [|78CDD621831532CBD69F2F3DEF1859DC|-] ERROR c.q.c.e.m.f.AbstractExceptionHandlingMessageFilter AbstractExceptionHandlingMessageFilter.handleODataException(...) (AbstractExceptionHandlingMessageFilter.java:135) - CIF[1079610] USENAME[myndp2016] - Integration OData error. [localId: '02fddce2-38c8-42f1-9690-f3fe0be1d6b2', integrationId: '32a2027c-18e1-42d7-90bc-50328480a8b8']
vn.com.vpbank.integration.bank.odata.exceptions.BusinessODataException: {"errorMessage":"Hệ thống đang tổng hợp dữ liệu cuối ngày, quý khách vui lòng thử lại sau.","errorCode":2020042205,"errorKey":"Error2020042205_descr"}
	at vn.com.vpbank.integration.bank.odata.exceptions.ODataExceptionHandlerImpl.handle(ODataExceptionHandlerImpl.java:73)
	at vn.com.vpbank.integration.bank.odata.ODataClient.handleErrorResponse(ODataClient.java:589)
	at vn.com.vpbank.integration.bank.odata.ODataClient.executeHttpRequest(ODataClient.java:552)
	at vn.com.vpbank.integration.bank.odata.ODataClient.executePost(ODataClient.java:457)
	at vn.com.vpbank.integration.bank.odata.ODataClient.createEntryInternal(ODataClient.java:353)
	at vn.com.vpbank.integration.bank.odata.ODataClient.createEntry(ODataClient.java:270)
	at vn.com.vpbank.integration.bank.odata.requests.ODataRequest.create(ODataRequest.java:161)
	at vn.com.vpbank.integration.bank.odata.requests.transfer.VerifyTransferRequest.execute(VerifyTransferRequest.java:204)
	at vn.com.vpbank.integration.bank.odata.BankODataService.verifyTransferToOwnProduct(BankODataService.java:1555)
	at vn.com.vpbank.services.bank.ODataBankService.verifyTransferToOwnProduct(ODataBankService.java:470)
	at sun.reflect.GeneratedMethodAccessor86.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:197)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
	at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:92)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)
	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)
	at com.sun.proxy.$Proxy22.verifyTransferToOwnProduct(Unknown Source)
	at vn.com.vpbank.operation.operations.transfer.AbstractTransferBetweenMyProductsOperation.verifyTransfer(AbstractTransferBetweenMyProductsOperation.java:397)
	at vn.com.vpbank.operation.operations.transfer.ToEasySavingTransferBetweenMyProductsOperation.processInputTransferDataStep(ToEasySavingTransferBetweenMyProductsOperation.java:63)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at org.srplib.reflection.ReflectionInvoker.invokeMethod(ReflectionInvoker.java:230)
	at vn.com.vpbank.operation.support.stephandler.MethodStepHandler.handle(MethodStepHandler.java:59)
	at vn.com.vpbank.operation.StandardOperationProcess.processOperationData(StandardOperationProcess.java:177)
	at vn.com.vpbank.operation.StandardOperationProcess.execute(StandardOperationProcess.java:143)
	at vn.com.vpbank.operation.operations.transfer.TransferBetweenMyProductsDispatchingOperation.execute(TransferBetweenMyProductsDispatchingOperation.java:258)
	at com.qulix.dbo.operation.support.handler.ExecuteProcessHandler.handle(ExecuteProcessHandler.java:31)
	at com.qulix.dbo.operation.support.OperationExecutionContext.processInternal(OperationExecutionContext.java:164)
	at com.qulix.dbo.operation.support.OperationExecutionContext.process(OperationExecutionContext.java:152)
	at vn.com.vpbank.operation.ProcessBasedOperationService.execute(ProcessBasedOperationService.java:119)
	at vn.com.vpbank.client.endpoint.actions.operation.ExecuteOperationAction.execute(ExecuteOperationAction.java:39)
	at vn.com.vpbank.client.endpoint.actions.operation.ExecuteOperationAction.execute(ExecuteOperationAction.java:25)
	at com.mobiletransport.messaging.server.filter.ActionInvokerFilter.filter(ActionInvokerFilter.java:77)
	at com.mobiletransport.messaging.server.MessageFilterChain.proceed(MessageFilterChain.java:48)
	at com.qulix.client.endpoint.messaging.filters.DocumentationLoggingMessageFilter.filter(DocumentationLoggingMessageFilter.java:29)
	at com.mobiletransport.messaging.server.MessageFilterChain.proceed(MessageFilterChain.java:48)
	at com.qulix.client.endpoint.messaging.filters.AuditMessageFilter.filter(AuditMessageFilter.java:47)
	at com.mobiletransport.messaging.server.MessageFilterChain.proceed(MessageFilterChain.java:48)
	at com.qulix.client.endpoint.messaging.filters.AbstractExceptionHandlingMessageFilter.filter(AbstractExceptionHandlingMessageFilter.java:86)
	at com.mobiletransport.messaging.server.MessageFilterChain.proceed(MessageFilterChain.java:48)
	at com.qulix.client.endpoint.messaging.filters.MdcMessageFilter.filter(MdcMessageFilter.java:40)
	at com.mobiletransport.messaging.server.MessageFilterChain.proceed(MessageFilterChain.java:48)
	at com.qulix.client.endpoint.messaging.connection.EnvelopeServerConnectionHandler.handleConnection(EnvelopeServerConnectionHandler.java:115)
	at com.mobiletransport.connector.http.MobileClientRequestDispatchingFilter.doFilterHttp(MobileClientRequestDispatchingFilter.java:45)
	at com.mobiletransport.connector.http.MobileClientRequestDispatchingFilter.doFilter(MobileClientRequestDispatchingFilter.java:36)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at com.mobiletransport.connector.http.filter.RequestResponseDumpFilter.doFilter(RequestResponseDumpFilter.java:78)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at net.sf.ehcache.constructs.web.filter.GzipFilter.doFilter(GzipFilter.java:145)
	at net.sf.ehcache.constructs.web.filter.Filter.doFilter(Filter.java:86)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at com.qulix.utils.checkpoint.CheckpointFilter.doFilter(CheckpointFilter.java:78)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at com.qulix.web.LoggingMdcFilter.doFilter(LoggingMdcFilter.java:70)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at vn.com.vpbank.i18n.I18nLocaleContextHolderFilter.doFilterInternal(I18nLocaleContextHolderFilter.java:64)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at vn.com.vpbank.client.endpoint.filters.RequestWrapperPublisherFilter.doFilter(RequestWrapperPublisherFilter.java:34)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:543)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
	at ch.qos.logback.access.tomcat.LogbackValve.invoke(LogbackValve.java:256)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
	at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:615)
	at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
	at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:818)
	at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1627)
	at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	at java.lang.Thread.run(Thread.java:748)
2020-10-27 00:02:42.077 [http-nio-8080-exec-41] [|78CDD621831532CBD69F2F3DEF1859DC|-] DEBUG c.q.u.checkpoint.CheckpointFilter CheckpointFilter.afterRequestProcessing(...) (CheckpointFilter.java:112) - HTTP END request /endpoint/envelope. Time total: 1958  backend: 0 
2020-10-27 00:02:46.478 [http-nio-8080-exec-38] [|2D598C0CF0FC730ACD8603C5C0B77A88|-] DEBUG c.q.u.checkpoint.CheckpointFilter CheckpointFilter.afterRequestProcessing(...) (CheckpointFilter.java:112) - HTTP END request /endpoint/envelope. Time total: 1389  backend: 0

So, anybody. Could you help me pattern for multiline log above.
i.e:
#filebeat.yml
multiline.pattern: ...pattern here...
multiline.negate: false
multiline.match: after

Many thanks!

Below configs should work for your use case

multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after

Thank valleram so much! The last one
So, can you help me? How can i config logstash grok filter with log pattern above?
i.e:

grok {
	match => { "message" => "...Grok Pattern Filter Here..." }
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.