# Display of multiline error messages **URL:** \ **Category:** Kibana\ **Created:** [March 1, 2016, 7:32pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152 "2016-03-01T19:32:56Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [March 1, 2016, 7:32pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/1 "2016-03-01T19:32:56Z")
I have FileBeat running with the multiline option feeding Logstash with a grok filter and everything seems to parse properly and ingest into Elasticsearch fine. The problem is display in Kibana. I have a pie-chart that displays logger and logmessage fields but those loggers associated with an error loglevel (all of which are stacktraces) appear to have no logmessage - but the Discover tab does show those events as having a multiline logmessage. I have another visualization on my dashboard, a data table, that just shows logmessages. When I drill down on the pie-chart to filter to error level events, the data table also becomes empty. Does kibana have trouble displaying multiline values? I think I expect to see the first few words truncated to display area. ---
**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\ **Post date:** [March 2, 2016, 4:34am UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/2 "2016-03-02T04:34:31Z")
Could you include some screenshots? ---
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [March 2, 2016, 1:54pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/3 "2016-03-02T13:54:57Z")
Sorry I can't provide screenshots - I'm on a private network. I'm probably not describing it very well but it's simply that multiline strings are not displayed. Is this normal? ---
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [March 2, 2016, 2:31pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/4 "2016-03-02T14:31:04Z")
I'll try to elaborate a little more. Every event has "logger" and "logmessage" fields. I have a pie-chart with two rings. The inner is my "logger" field and the outer is my "logmessage" field. All the "logger" segments have one or more "logmessage" values except for those with a multiline "logmessage" (stacktraces in my original log file). Those segments appear empty - no color, no hover - in the outer ring. I'm not sure what should appear: a multiline hover or just the first line, but something should appear. ---
**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\ **Post date:** [March 2, 2016, 6:56pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/5 "2016-03-02T18:56:55Z")
Kibana doesn't have any issue with multi-line values. The data set that I use had several of them. There must be an issue elsewhere, but I'm having a hard idea where that might... ---
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [March 2, 2016, 7:09pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/6 "2016-03-02T19:09:07Z")
Thanks for replying Spencer. How do the multiline values appear, for instance, when hovering in a pie-chart? Do you see the whole 20+ lines or just one line? ---
**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\ **Post date:** [March 2, 2016, 7:38pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/7 "2016-03-02T19:38:46Z")
I would expect the tooltip to show the whole value. What aggregation are you using to show the stack traces? Is your field analyzed? ---
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [March 2, 2016, 7:50pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/8 "2016-03-02T19:50:49Z")
I'm using split slices for terms for both logger.raw and logmessage.raw. Logger on the inside and logmessage on the outer ring. The logger in question is accompanied with a blank section in the outer ring - no mouseover or color. Yet I see that logger in Discover with a multiline logmessage! ---
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [March 3, 2016, 6:11pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/9 "2016-03-03T18:11:26Z")
Further, if I create a new pie-chart for term "logmessage.raw" and enter into the search field at top of the page the logmessage in question it displays in the chart fine. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:00pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152/10 "2017-07-06T14:00:22Z")