Input docker: multiple multiline.pattern

Elastic Stack Beats
1

I'm new to ELK(with beats) and have more conceptual question. My inputs config looks like

filebeat.inputs:
- type: container
  combine_partial: true
  paths:
  - /var/lib/docker/containers/*/*.log
  multiline.pattern: '^[[:space:]]'
  multiline.negate: false
  multiline.match: after

and is used to parse java stack trace, but my question is if I can add regex to concatenate stack traces from nodejs better than just add them to multi line.pattern array. I have looked through processors, but it seems it can't be done this way. I could add them like variables but this there could be duplication, which probably isn't best. Is there any better way? And in general is there any better way to parse stack traces from nodejs, java, python, go etc. ? This seems like there should be some module/predefined processor etc. to handle stack traces for commonly used languages and I tried to find this, but nothing came up(except for java in official docs)...did I miss something?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.