Elastic search aggregation not fetching complete Java trace

Elastic Stack Kibana
1 
Hello Experts,

I have created Data Table visualization and API for aggregations to get the application logs.
It is fetching only 2 lines of log messages in the Data Table, if the log contains more than 3 lines example Java trace, not able to get the application log, but am able to view in Kibana dashboard (I added multiline pattern in Filebeat ....... of course).



**Below is the example**
org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot load JDBC driver class 'com.ibm.db2.jcc.DB2Driver'
 at org.apache.tomcat.dbcp.dbcp.BasicDataSource.createDataSource(BasicDataSource.java:1136)
 at org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSource.java:880)
 at com.azurian.lce.usuarios.ConnectionManager.getConnection(ConnectionManager.java:65)
 at com.azurian.lce.usuarios.db2.UsuarioDAOImpl.autenticar(UsuarioDAOImpl.java:101)
 at com.azurian.lce.usuarios.UsuarioServiceImpl.autenticar(UsuarioServiceImpl.java:31)
 at com.azurian.lce.web.admin.actions.LoginAction.execute(LoginAction.java:49)
 at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
 at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
 at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
 at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
 at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
 at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
 at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
```
2

The stack trace does not show anything related to elasticsearch.
Not sure what answer we could give here.

3

Hi David,

Java trace is the longest stack, so not able to get into buckets key.
------------ "key" : "here longest java trace should include", ----------------

Do I need to make any changes in Kibana advanced settings ?

Regards,
Suresh

4

Sounds like I misread your question!

I'm moving it to #elastic-stack:kibana as I believe it's a problem regarding how to display multilines of logs in Kibana.

5 
Hi David,

I got the solution. by increasing ignore_above: 256 in index mappings.

I need to work on this. Below is the reference doc      

https://discuss.elastic.co/t/column-too-large-for-kibana-data-table-display/110424/6 

Thank you so much.
6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.