Filebeat not starting

Elastic Stack Beats
1

my filebeat.yaml

filebeat.inputs:
- type: log
paths:
- /var/log/apache2/whatfix_access.log
tags: ["apache"]

- type: log
  paths:
    - /usr/lib/quickonutch/logs/quickoapi.20*
  tags: ["api"]
  multiline.pattern: '^[[:space:]]|^Caused by:'
  multiline.negate: false
  multiline.match: after

- type: log
  paths:
    - /var/log/redis/*.log
  tags: ["redis"]
  multiline.match: after

- type: log
  paths:
    - /var/log/cassandra/system.log
  tags: ["cassandra"]
  multiline.pattern: '^ '
  multiline.negate: true
  multiline.match: after

output.logstash:
hosts: [""]
index: logstash
~

When I am trying to restart filebeat it fails with exit-code.
Exiting: Error while initializing input: missing required field accessing 'filebeat.inputs.2.multiline.pattern' (source:'/etc/filebeat/filebeat.yml')

What am i missing?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.