Ingestion of several double lines in elastic research

Elastic Stack Beats
1

I use file beat and logstsh for ingest csv in elastic i have this problem

ingestion of several double lines in elastic research
can you help me please?

I use this config in filebeat

 filebeat.inputs:


- type: log

  # Change to true to enable this input configuration.
  enabled: true

 # Paths that should be crawled and fetched. Glob based paths.
 paths:
  C:\Users\h83710\Desktop\elastic\logstash-7.5.2\test\poca.csv

# Ignore the first line with column headings
 exclude_lines: [ "chaine", "job", "date_plan", "statut", "date_debut", "date_fin", "serveur", 
"numero_passage", "application", "sous_application" ]

 # Identifies the last two columns as the end of an entry and then prepends the previous lines 
to it
   multiline.pattern: '^\d'
   multiline.negate: true 
   multiline.match: after
2

can you help me please ??

3

I moved the question to #beats:filebeat.

Have a look at https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-deduplication.html

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.