Filebeat multiline message display

Hi.. i am trying to create multiline for "t message" on elasticsearch
but it's always showing sing line for each log on elasticsearch
this from elasticsearch

and this from logs file

on filebeat.inputs i am using this multiline config
multiline.pattern: '^\A'
multiline.negate: true
multiline.match: after

kindly advise for correction
thanks in advance :slight_smile:

hi @vadrix, can you provide us with maybe 2 examples from the log files in order to get a a better idea on where you want to separate the log lines?

Hi Mariana,

here sample log from my server (showing 2 lines)

and here display log from elasticsearch, become 2 separated log

i want it shows in single log, something like this

thanks in advance

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.