Hi, I'm pretty new here and I am experimenting with ELK. One thing I couldn't figure out until now is: How can I parse a log line by line with each line becoming its own event? For example, I have a log file which looks like this: ! 123 ! 456 ! abc ! def ! 009 ! ! 123 ! 456 ! abc ! def ! 009 ! …

Hi Kaiyan_Sheng, Already solved it. It was a misconfiguration within the Filebeat still having a multi-line parameter active :slight_smile: After deleting, it worked fine!

Discuss the Elastic Stack

How to separate a log line by line

Elastic Stack Beats

system (system) Closed March 5, 2020, 3:34pm 6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Filebeat parsing issue Beats filebeat	1	375	March 4, 2020
Filebeat multiline issue Beats filebeat	2	310	July 16, 2018
Filebeat multiline configuration issue Beats filebeat	2	645	March 8, 2018
Filebeat multiline question Beats filebeat	7	1658	July 5, 2017
Multiline logs are not working using filebeat Beats filebeat	1	560	November 19, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to separate a log line by line

Related topics