Filebeat multiline pattern is not working

Elastic Stack Beats
1

Dear all,

I have created such multiline pattern for filebeat for following type of log.

multiline.pattern: ^[[0-9]]{4}-[[0-9]]{2}-[[0-9]]{2} [[0-9]]{2}:[[0-9]]{2}:[[0-9]]{2},[[0-9]]{3}
multiline.negate: true
multiline.match: after

But it is not working.

What is wrong?

2020-01-27 10:00:08,053 INFO [catalina-exec-31] (XYXAPICommands:43) RN:123059



1

1
2
3
4
5



2

1
2
3
4
5



200
SUCCESS
YES

00000
1111111
fger53fd
1
XXX
YYY
ZZZ
25.01.1970
USA
Vas Vegas
26.04.2016
25.01.2022
0


0
0
0
0


0
0
0
0


1
dgfddfjghjkghkgkghkgh==

2

Hi!

Could you please structure better your question?

  1. What is the exact configuration you are using.
  2. What is the input you want to handle.
  3. What is the ouput (if any, or errors).

Also please syntax the config/input/output blocks with tripple quotes (...) to provide better readability.

Thanks!

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.