# Identify Whether a message sent by Filebeat is Multiline or not

**URL:** <https://discuss.elastic.co/t/identify-whether-a-message-sent-by-filebeat-is-multiline-or-not/150032>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 26, 2018, 2:36pm UTC](https://discuss.elastic.co/t/identify-whether-a-message-sent-by-filebeat-is-multiline-or-not/150032 "2018-09-26T14:36:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![KumarSaurabh](https://avatars.discourse-cdn.com/v4/letter/k/8e7dd6/32.png) [@KumarSaurabh](https://discuss.elastic.co/u/KumarSaurabh)\
**Post date:** [September 26, 2018, 2:36pm UTC](https://discuss.elastic.co/t/identify-whether-a-message-sent-by-filebeat-is-multiline-or-not/150032/1 "2018-09-26T14:36:46Z")

</div>

I am working on FileBeat 6.4 and sending data to logstash. I am using multiline settings to send java exception stack trace.

Is there any metadata sent to logstash by FIlebeat when it sends multiline message?  
If no, then is there any way to add new metadata in FIlebeat when multiline message is sent across?

Idea is to identify whether message is multiline or not in logstash and I am trying to figure it out at source (Filebeat here).

Any help is appreciated. Thanks !

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [September 26, 2018, 9:22pm UTC](https://discuss.elastic.co/t/identify-whether-a-message-sent-by-filebeat-is-multiline-or-not/150032/2 "2018-09-26T21:22:42Z")

</div>

This feature will be added in 6.5: [https://github.com/elastic/beats/pull/7997](https://github.com/elastic/beats/pull/7997)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 24, 2018, 11:22pm UTC](https://discuss.elastic.co/t/identify-whether-a-message-sent-by-filebeat-is-multiline-or-not/150032/3 "2018-10-24T23:22:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
