FileBeat Log Message combine

Elastic Stack Beats
1

Hi.
I am looking for a way (in FileBeat if possible) to combine log messages that are timestamped at the same time.
For example, I have an error log message with 9 lines. If I search for a certain word in the log via Kibana, it flags the log without a problem.
However, the rest of the error log message lines are not displayed because it doesn't satisfy the search criteria - but it is part of the same error log message.
Looks like elasticsearch is treating each line in the error message as a separate message line.
How can I combine the lines in the same error log message - so I can display the error message as one complete message?

Thanks.

2

So i've found something called "View Surrounding Documents" in Kibana which enables me to do something similar. But is there any way to combine the message in the logging area?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.