How to split a long line into multiple events

(John Chen) #1

I have a log file which only have one line.
The records are separated by "^MAAA" within that single line record. Here is an example:
Above line contains 3 events:

Can somebody give me a hint for how to configure the beats on this situation?
I searched through and most of the posts are for multiplelines -> single event. I need the other way around.

Thank you in advance,

John Chen

(Mark Walkom) #2

Beats cannot do that, you need to use Logstash.

(system) #3

This topic was automatically closed after 21 days. New replies are no longer allowed.