Did Filebeat consider adding a Grok processor in the processing module? It would be very smooth to use Filebeat to format multiline data when the destination is not Elasticsearch, without the need for an additional layer of Logstash.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.