AWS streaming multi-line log files from CloudWatch to ELK

We are streaming app logs from CloudWatch to AWS ELK. Our microservices are written in Java and so I am only concentrating on those. A typical java exception stack trace when logged looks like this:

Exception in thread "main" java.lang.NullPointerException
at com.example.myproject.Book.getTitle(
at com.example.myproject.Author.getBookTitles(
at com.example.myproject.Bootstrap.main(

Normally, this will be ingested line by line in ELK stack, which breaks the entire message.

Usually, For entire stack trace to be ingested as a single message, one can configure multiline plugin either in Logstash or Filebeat.

Any idea how to enable multiline while streaming log files from CloudWatch to ELK by AWS lambda?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.