# How to send both single line and multiple line to output

**URL:** <https://discuss.elastic.co/t/how-to-send-both-single-line-and-multiple-line-to-output/377777>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 3, 2025, 6:18pm UTC](https://discuss.elastic.co/t/how-to-send-both-single-line-and-multiple-line-to-output/377777 "2025-05-03T18:18:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![MelasticSan](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@MelasticSan](https://discuss.elastic.co/u/MelasticSan)\
**Post date:** [May 3, 2025, 6:18pm UTC](https://discuss.elastic.co/t/how-to-send-both-single-line-and-multiple-line-to-output/377777/1 "2025-05-03T18:18:48Z")

</div>

```auto
{"time":"2025-05-03T05:30:47+0000","pid":"1012395","level":"info"......
{"time":"2025-05-03T05:30:47+0000","pid":"1012395","level":"debug"......

```

All lines in the input files start like above and some are single line and some are multiline and some of them have level "info" and some "debug" .

Current configuration has the following, however only multiline is being captured . Is there a wild card or some other processor that needs to be added to collect everything from input file ?

```auto
        pattern: '^[[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2}'
        negate: true
        match: after

```

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 3, 2025, 7:16pm UTC](https://discuss.elastic.co/t/how-to-send-both-single-line-and-multiple-line-to-output/377777/2 "2025-05-03T19:16:23Z")

</div>

> [@MelasticSan](#):
>
> All lines in the input files start like above and some are single line and some are multiline and some of them have level "info" and some "debug"

Please share an example of a multiline log.