# Error with multiline codec

**URL:** <https://discuss.elastic.co/t/error-with-multiline-codec/92005>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 6, 2017, 2:42am UTC](https://discuss.elastic.co/t/error-with-multiline-codec/92005 "2017-07-06T02:42:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ahongyun](https://avatars.discourse-cdn.com/v4/letter/a/c77e96/32.png) [@ahongyun](https://discuss.elastic.co/u/ahongyun)\
**Post date:** [July 6, 2017, 2:42am UTC](https://discuss.elastic.co/t/error-with-multiline-codec/92005/1 "2017-07-06T02:42:39Z")

</div>

Below is my filebeat yml:

```
---
    filebeat.prospectors: 

     ## mxtiming_server.log ##
      - 
        document_type: timing_server.log
        paths: 
          - /appdir/logs/traces/timing_*_*_*.log

 ## launchermandatory ##
  - 
    document_type: launchermandatory.log
    paths: 
      - appdir/logs/*.launcher.site1.common.launchermandatory.log
        multiline:    
          pattern: "^%{TIMESTAMP_ISO8601}|^Start|^Process"
          negate: true
          match: "previous"
output.logstash: 
  hosts: 
    - "10.23.123.12:5044"

```

I encounter this error when trying to start filebeat.

> 2017/07/06 02:46:30.768030 beat.go:339: CRIT Exiting: error loading states for prospector 11305635189455336900: unknown matcher type: previous accessing 'filebeat.prospectors.1.multiline' (source:'/etc/filebeat/filebeat.yml')  
> Exiting: error loading states for prospector 11305635189455336900: unknown matcher type: previous accessing 'filebeat.prospectors.1.multiline' (source:'/etc/filebeat/filebeat.yml')

Can someone help me with this?

Is it my syntax?

Thanks

---

<div class="post-metadata">

**Author:** ![ahongyun](https://avatars.discourse-cdn.com/v4/letter/a/c77e96/32.png) [@ahongyun](https://discuss.elastic.co/u/ahongyun)\
**Post date:** [July 6, 2017, 6:49am UTC](https://discuss.elastic.co/t/error-with-multiline-codec/92005/2 "2017-07-06T06:49:10Z")

</div>

Ok i solved the error.  
Stupid mistake by me.

match: before / after  
not previous / next

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [July 6, 2017, 9:28am UTC](https://discuss.elastic.co/t/error-with-multiline-codec/92005/3 "2017-07-06T09:28:43Z")

</div>

Glad you did! I marked your own answer as solution, others may benefit from it 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 3, 2017, 9:28am UTC](https://discuss.elastic.co/t/error-with-multiline-codec/92005/4 "2017-08-03T09:28:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.