I'm getting this error using lostash 6.0.1 docker image.
The pipeline configuration I'm using is:
input {
#udp {
# port => 5000
# codec => json
#}
tcp {
port => 5000
codec => json
}
}
filter {
grok {
match => { "message" => "%{TIMESTAMP_ISO8601:time}\|%{LOGLEVEL:loglevel}\|%{DATA:logger}\|(?<message>(?m:.*))" }
}
multiline {
pattern => "%{TIMESTAMP_ISO8601}"
negate => true
what => previous
}
}
output {
elasticsearch {
hosts => [""]
ssl => true
}
}