# Append logs using filebeat

**URL:** <https://discuss.elastic.co/t/append-logs-using-filebeat/252322>\
**Category:** Beats\
**Tags:** docker, filebeat\
**Created:** [October 16, 2020, 9:18am UTC](https://discuss.elastic.co/t/append-logs-using-filebeat/252322 "2020-10-16T09:18:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abhishek\_Sharma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhishek_sharma/32/77322_2.png) [@Abhishek\_Sharma](https://discuss.elastic.co/u/Abhishek_Sharma)\
**Post date:** [October 16, 2020, 9:18am UTC](https://discuss.elastic.co/t/append-logs-using-filebeat/252322/1 "2020-10-16T09:18:34Z")

</div>

My logs produce some content that I can see only when appended using (-A 20) or (- A 200). For Ex: While seeing a log from a docker container, I do :  
`docker logs [container_id] | grep "something" -A 20`

Now i have implemnted ELK stack and collecting these logs using filebeats but the issue is I am unable to see those appended logs.

## What should be done in the input section of filebeat.yml to get the appended result in kibana ?

filebeat.inputs:

## -type: container encoding: "utf-8" paths: - '/var/lib/docker/containers/ _/_ .log'

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [October 16, 2020, 5:55pm UTC](https://discuss.elastic.co/t/append-logs-using-filebeat/252322/2 "2020-10-16T17:55:39Z")

</div>

It sounds like you're looking for Filebeat's multiline options: [https://www.elastic.co/guide/en/beats/filebeat/current/multiline-examples.html](https://www.elastic.co/guide/en/beats/filebeat/current/multiline-examples.html).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 13, 2020, 7:55pm UTC](https://discuss.elastic.co/t/append-logs-using-filebeat/252322/3 "2020-11-13T19:55:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.