How to handle message receive multiline in logstash

Elastic Stack Logstash
1

Hi all,

I create a grok pattern and execute some bash script..Unfortunately this script produce two line of output. The question is how to properly index the data into elasticsearch as it contains 2 line of text in message field ?
Example of line text in message field as below
Message => myhome1 totalspace: 1g availablespace:2g/nmyhome2 totalspace: 1g availablespace: 1g

As of now i can see like this message was index as one event in elasticsearch..anyidea how to properly handle this ? Any help asap is highly appreciated !

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.