Count number of line in message field(multiline message field)

Count the number of newlines and add 1. No fancy escaping schemes in logstash, just embed a literal newline in the string...

    ruby { code => 'event.set("numLines", 1 + event.get("message").count("
"))' }