Filebeat Mutiline not working


(Aman Singhal) #1

i have filebeat/logstash/elasticsearch/kibana (6.0.3) version

I tried multi-line with filebeat for sample logs first but its not working

log file
Exception in thread "main" java.lang.NullPointerException
at com.example.myproject.Book.getTitle(Book.java:16)
at com.example.myproject.Author.getBookTitles(Author.java:25)
at com.example.myproject.Bootstrap.main(Bootstrap.java:14)

filebeat (yml)

filebeat.prospectors:

  • type: log
    paths:
    • /var/test.log

multiline.pattern: '^[[:space:]]'
multiline.negate: false
multiline.match: after

output.logstash:
hosts: ["10.38.129.39:5044"]

Output

"message": " at com.example.myproject.Bootstrap.main(Bootstrap.java:14)",
"prospector": {
"type": "log"
}
}

Not combiing the lines


(Magnus B├Ąck) #2

I suggest you edit your post and move it to the Filebeat category. It's not a Logstash question.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.