Hello, How can I manage log lines which have multiple /n and /r characters with Grok? The log line here is a multiline and looking to replace the /r /n with "". My filter looks like this : filter{ grok {match => ["message","%{TIMESTAMP_ISO8601:timestamp}|%{GREEDYDATA:call_trace}"]} mutate {gs…

I managed to get it working by using the below filter. filter{ mutate { gsub => [ "message", "[\n]", "" ] } } Thanks for the assistance.

Ignore Text and carriage return characters

harshavardan25000 (harsha) May 11, 2017, 11:57am 3

I believe Strip is used only to remove trailing and leading white spaces. In my case I want to remove carriage returns/new lines

Topic		Replies	Views
How to get Grok Filter to see Newline and Carriage Returns? Logstash	2	7431	July 6, 2017
Ignoring text and carriage return characters with Grok Logstash	2	1736	December 12, 2016
Help with removing parts of log output Logstash	3	834	March 23, 2018
How to replace 'special characters' with a logstash filter Logstash	3	44081	July 6, 2017
Filter empty line with just \r in it Logstash	2	2533	July 6, 2017