Hello all, I try to setup a custom log policy for our java logs. Previously we used filebeat and had the following lines in filebeat.yml to configure multiline log entries: multiline: match: after negate: true pattern: ^[0-9]+ This resulted having logs like the following in one docu…

I finally managed to solve it by my self. There was an error in the Grok pattern of the ingest pipeline.

Fleet agent custom log integration multiline settings

system (system) Closed March 17, 2022, 12:03pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Custom logs multiline Beats elastic-agent	2	1684	March 4, 2022
Multiline log in elastic agent Beats elastic-agent	2	2428	January 4, 2021
Multiline events not parsed correctly Beats fleet , elastic-agent	1	459	August 4, 2022
Multi line logs Beats	3	1771	July 5, 2017
How to make filebeat multiline plugin send the unmatched logs Beats filebeat	4	1400	March 8, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Fleet agent custom log integration multiline settings

Related topics