Exclude lines isn't working with multiline pattern

Elastic Stack Beats
1

this is my filebeat.yml

  exclude_lines: ['^[[:space:]]']
  multiline.pattern: '^(3[01]|0[1-9]|[12][0-9])(-?)(1[0-2]|0[1-9])(-?)([0-9]{4})'
  multiline.negate: true
  multiline.match: after

i want to exclude the lines which begin with space in every event

2

Can u provide an example logs that you're trying to match?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.