# Filebeat multiline pattern is not working

**URL:** <https://discuss.elastic.co/t/filebeat-multiline-pattern-is-not-working/216647>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 27, 2020, 11:19am UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-is-not-working/216647 "2020-01-27T11:19:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![emilio](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@emilio](https://discuss.elastic.co/u/emilio)\
**Post date:** [January 27, 2020, 11:19am UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-is-not-working/216647/1 "2020-01-27T11:19:45Z")

</div>

Dear all,

I have created such multiline pattern for filebeat for following type of log.

multiline.pattern: ^[[0-9]]{4}-[[0-9]]{2}-[[0-9]]{2} [[0-9]]{2}:[[0-9]]{2}:[[0-9]]{2},[[0-9]]{3}  
multiline.negate: true  
multiline.match: after

But it is not working.

What is wrong?

2020-01-27 10:00:08,053 INFO [catalina-exec-31] (XYXAPICommands:43) RN:123059   
  
  
  
1  
  
1  
2  
3  
4  
5  
  
  
  
2  
  
1  
2  
3  
4  
5  
  
  
  
200  
SUCCESS  
YES  
  
00000  
1111111  
fger53fd  
1  
XXX  
YYY  
ZZZ  
25.01.1970  
USA  
Vas Vegas  
26.04.2016  
25.01.2022  
0  
  
  
0  
0  
0  
0  
  
  
0  
0  
0  
0  
  
  
1  
dgfddfjghjkghkgkghkgh==

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [January 27, 2020, 1:00pm UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-is-not-working/216647/2 "2020-01-27T13:00:36Z")

</div>

Hi!

Could you please structure better your question?

1. What is the exact configuration you are using.
2. What is the input you want to handle.
3. What is the ouput (if any, or errors).

Also please syntax the config/input/output blocks with tripple quotes (`...`) to provide better readability.

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 24, 2020, 1:12pm UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-is-not-working/216647/3 "2020-02-24T13:12:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.