# Error stacktrace take separate log line in logstash

**URL:** https://discuss.elastic.co/t/error-stacktrace-take-separate-log-line-in-logstash/250812
**Category:** Logstash
**Created:** [October 2, 2020, 3:24pm UTC](https://discuss.elastic.co/t/error-stacktrace-take-separate-log-line-in-logstash/250812 "2020-10-02T15:24:18Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Bhavin\_Varsur](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)
#### Post date: [October 2, 2020, 3:24pm UTC](https://discuss.elastic.co/t/error-stacktrace-take-separate-log-line-in-logstash/250812/1 "2020-10-02T15:24:18Z")

</div>

I used multiline pattern in filebeat. the stacktrace of error log taking another line.not be with error log

here is my filebeat multiline pattern:  
multiline.pattern: '^[[:space:]]'  
multiline.negate: false  
multiline.match: after

here is logstash output

 ![Untitled1](https://us1.discourse-cdn.com/elastic/original/3X/4/3/43224e18cc2b62e3b08d1f1b63e90259aebe8c0b.png)

please help me to find out solution

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [October 2, 2020, 4:51pm UTC](https://discuss.elastic.co/t/error-stacktrace-take-separate-log-line-in-logstash/250812/2 "2020-10-02T16:51:18Z")

</div>

Please do not post pictures of text, just post the text. Pictures are hard to read and impossible to search.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 30, 2020, 5:50pm UTC](https://discuss.elastic.co/t/error-stacktrace-take-separate-log-line-in-logstash/250812/4 "2020-10-30T17:50:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
