# Filebeat Multiline Config Help
**URL:** https://discuss.elastic.co/t/filebeat-multiline-config-help/246667
**Category:** Beats
**Tags:** filebeat
**Created:** [August 27, 2020, 5:17pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-help/246667 "2020-08-27T17:17:35Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@userR](https://discuss.elastic.co/u/userR)
#### Post date: [August 27, 2020, 5:17pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-help/246667/1 "2020-08-27T17:17:35Z")
Log start: Aug 24 03:32:21
Filebeat Multiline: multiline.pattern:
> ^[[A-Z][a-z]{3} [0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}
Logstash date filter:
> "MMM dd HH:mm:ss"
For some reason, my Filebeat multiline pattern does not work for this log data. Is there something wrong with having spaces in the multiline pattern?
---
### Author:  [@Kaiyan\_Sheng](https://discuss.elastic.co/u/Kaiyan_Sheng)
#### Post date: [August 29, 2020, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-help/246667/2 "2020-08-29T15:34:48Z")
Hmm looking at [example](https://www.elastic.co/guide/en/beats/filebeat/current/multiline-examples.html#_timestamps) here, for timestamp the multiline pattern should be:
```auto
'^\[[A-Z][a-z]{3} [0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}'
```
Maybe you are only missing `\`?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 26, 2020, 5:34pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-help/246667/3 "2020-09-26T17:34:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.