Elastic search aggregation not fetching complete Java trace

Hello Experts,

I have created Data Table visualization and API for aggregations to get the application logs.
It is fetching only 2 lines of log messages in the Data Table, if the log contains more than 3 lines example Java trace, not able to get the application log, but am able to view in Kibana dashboard (I added multiline pattern in Filebeat ....... of course).



**Below is the example**
org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot load JDBC driver class 'com.ibm.db2.jcc.DB2Driver'
 at org.apache.tomcat.dbcp.dbcp.BasicDataSource.createDataSource(BasicDataSource.java:1136)
 at org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSource.java:880)
 at com.azurian.lce.usuarios.ConnectionManager.getConnection(ConnectionManager.java:65)
 at com.azurian.lce.usuarios.db2.UsuarioDAOImpl.autenticar(UsuarioDAOImpl.java:101)
 at com.azurian.lce.usuarios.UsuarioServiceImpl.autenticar(UsuarioServiceImpl.java:31)
 at com.azurian.lce.web.admin.actions.LoginAction.execute(LoginAction.java:49)
 at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
 at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
 at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
 at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
 at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
 at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
 at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
```

The stack trace does not show anything related to elasticsearch.
Not sure what answer we could give here.

Hi David,

Java trace is the longest stack, so not able to get into buckets key.
------------ "key" : "here longest java trace should include", ----------------

Do I need to make any changes in Kibana advanced settings ?

Regards,
Suresh

Sounds like I misread your question!

I'm moving it to #elastic-stack:kibana as I believe it's a problem regarding how to display multilines of logs in Kibana.

Hi David,

I got the solution. by increasing ignore_above: 256 in index mappings.

I need to work on this. Below is the reference doc      

https://discuss.elastic.co/t/column-too-large-for-kibana-data-table-display/110424/6 

Thank you so much.