Hi I am Doing Data Transformation in Logstash. I need to parse a block of pattern in Logstash.
I am using multiine given below
multiline {
pattern => "^[" #Start of Block
what => "previous"
negate=> true
}
Now I need to specify end of block. I saw one option called flush_pattern when surfing over. But its not working. Its throwing error [logstash.filters.multiline] Unknown setting 'flush_pattern' for multiline
Is there any way to specify end of a multiline message???
Regards
Sanriya