Flush pattern in multiline


#1

Hi I am Doing Data Transformation in Logstash. I need to parse a block of pattern in Logstash.

I am using multiine given below
multiline {
pattern => "^[" #Start of Block
what => "previous"
negate=> true
}

Now I need to specify end of block. I saw one option called flush_pattern when surfing over. But its not working. Its throwing error [logstash.filters.multiline] Unknown setting 'flush_pattern' for multiline

Is there any way to specify end of a multiline message???

Regards
Sanriya


(system) closed #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.