Identify Whether a message sent by Filebeat is Multiline or not

Elastic Stack Beats
1

I am working on FileBeat 6.4 and sending data to logstash. I am using multiline settings to send java exception stack trace.

Is there any metadata sent to logstash by FIlebeat when it sends multiline message?
If no, then is there any way to add new metadata in FIlebeat when multiline message is sent across?

Idea is to identify whether message is multiline or not in logstash and I am trying to figure it out at source (Filebeat here).

Any help is appreciated. Thanks !

2

This feature will be added in 6.5: https://github.com/elastic/beats/pull/7997

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.