How to get logstash to parse multi-line fields into multiple lines

[thadc (Timothy Clotworthy)]

Hi, we have messages input into logstash from filebeat where some fields are multi-line (e.g., like a stack trace message field). By default, after grok-parsing a field that was multi-line in the original log file , the parsed output of the field is one wrapped-around line. Is there a way to preserve the original multi-line state in the parsed output? If so, how can it be accomplished?

thanks for any response.

[Badger]

If you want to split a multi-line message into multiple events then you can use

split {}