How to filter log file by id in kibana

Elastic Stack Logstash
1

Hi i am new to ELk stack .
i have a log file that contain many bills. every bill has more then 200 lignes of information plus the id of the bill presented in this way

informations about bill 1 : informations
bill ID : 1
**** END SUCESS date format *****
informations about bill 2 : informations
bill ID : 2
**** END SUCESS date format *****

i need to filter every bill by it iD in kibana , does any one have any idea how to do this ?

my idea was to split the logs with grok at the begining of every **** END SUCESS
but how can i put every bill in single message .

2

Use a multiline codec on the input to combine all the lines for a single bill.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.