I have a log file that has mixed structure, some are multiple line json, some are single line json and some are plain text.
My goal is to Parse Json and send to elastic, and ignore the plain text.
I read through the documentation and it says that Filebeat can work with multiline json/ single line json and plain text (mixed logs)
now when i try to implement it some things are off
Multiline json are not parsed at all
Ignore plain text does not seem to work because it throws parsing error and still dumps the content into elastic
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.