Custom logs multiline

Elastic Stack Beats
1

Im trying to add multiline to the custom log integration configuration for elastic agent, i tryied the following way:

multiline.type: pattern
multiline.pattern: '[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after
pipeline: logs-dotnet-pipeline

but nothing happens and i dont receive the logs, i guess that im putting wrong the multiline on the configuration yml for the custom log, but i cant find any documentation on how to configure the custom log configurations, when i put only the pipeline only it works like a charm but i need to identify and joint the logs with the multiline because i receive some logs of .net Exceptions that are multilined

2

Nevermind it was a problem with updating the policy on the agent, it works as expected with the above config. Thanks

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.