Filebeat does not read field when it includes a new line

Elastic Stack Beats
1

I have the following data which filebeat cannot process due to the new line

"field_1","field_2","field_3","field_4","field_5",
"921122.27872","

34905888319","FRGG","2022-09-23","XYZ"

What I need is that the second field will be indexed with the space in it. So the whole entry above will indexed as one line.

I do not seem to be able to do it with my current multiline yaml configuration.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.