# FileBeat Log Message combine

**URL:** <https://discuss.elastic.co/t/filebeat-log-message-combine/203062>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 10, 2019, 3:29pm UTC](https://discuss.elastic.co/t/filebeat-log-message-combine/203062 "2019-10-10T15:29:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![warnerrj79](https://avatars.discourse-cdn.com/v4/letter/w/ecb155/32.png) [@warnerrj79](https://discuss.elastic.co/u/warnerrj79)\
**Post date:** [October 10, 2019, 3:29pm UTC](https://discuss.elastic.co/t/filebeat-log-message-combine/203062/1 "2019-10-10T15:29:43Z")

</div>

Hi.  
I am looking for a way (in FileBeat if possible) to combine log messages that are timestamped at the same time.  
For example, I have an error log message with 9 lines. If I search for a certain word in the log via Kibana, it flags the log without a problem.  
However, the rest of the error log message lines are not displayed because it doesn't satisfy the search criteria - but it is part of the same error log message.  
Looks like elasticsearch is treating each line in the error message as a separate message line.  
How can I combine the lines in the same error log message - so I can display the error message as one complete message?

Thanks.

---

<div class="post-metadata">

**Author:** ![warnerrj79](https://avatars.discourse-cdn.com/v4/letter/w/ecb155/32.png) [@warnerrj79](https://discuss.elastic.co/u/warnerrj79)\
**Post date:** [October 10, 2019, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-log-message-combine/203062/2 "2019-10-10T16:03:05Z")

</div>

So i've found something called "View Surrounding Documents" in Kibana which enables me to do something similar. But is there any way to combine the message in the logging area?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 7, 2019, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-log-message-combine/203062/3 "2019-11-07T16:03:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.