How to split a long line into multiple events

Elastic Stack Beats
1

I have a log file which only have one line.
The records are separated by "^MAAA" within that single line record. Here is an example:
^MAAA20160711,111111,222222^MAAA20160712,33333,44444^MAAA20160713,55555,66666
Above line contains 3 events:
20160711,111111,222222
20160712,33333,44444
20160713,55555,66666

Can somebody give me a hint for how to configure the beats on this situation?
I searched through and most of the posts are for multiplelines -> single event. I need the other way around.

Thank you in advance,

John Chen

2

Beats cannot do that, you need to use Logstash.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.