I wrote a multiline pattern to read multiple lines of a log .Now when i start the filebeat I see the same line twice on my kibana dashboard.
filebeat multiline pattern
multiline.pattern: '^[[:space:]]Event:[[:space:]][[:alpha:]]+[[:space:]][[:alpha:]|.]+[[:space:]][[:alnum:]|-]+[[:space:]][[:alnum:]|:|.]+[[:space:]]([[:alnum:]|-]/[0-9|.])\n'
multiline.negate: false
multiline.match: after
my log-
Event: ERROR com.manish.trans.logistics.lms.framework.exception.ABCException 2019-10-24 18:45:08.273 (In-Manish-1/129.221.10.40)
Thread: JBossWeb-threads - 16
LOG ID VALUE : 5021 from null
my logstasg grock pattern
grok {
match =>
{
"message" => "%{SPACE}%{WORD:Event}:%{SPACE}%{WORD:loglevel} %{JAVACLASS:ExceptionClass}%{SPACE}%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{GREEDYDATA:message}"
#"message" => "%{SPACE}%{WORD:Event}:%{SPACE}%{LOGLEVEL:loglevel} %{WORD:uw}.%{WORD:com}.%{WORD:unisys}.%{WORD:trans}.%{WORD:logistics}.%{WORD:lms}.%{WORD:framework}.%{WORD:uw}.%{WORD:ExceptionClass}.%{IP:msg})(?(.|\r|\n))"
}
}