Java stack traces in example at elastic dosn't work Multiline java type log

I have log:

2016-11-10 06:52:09.868+0000 ERROR The RuntimeException could not be mapped to a response
 java.lang.ArrayIndexOutOfBoundsException: 1
              at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethod

second string start with java... following 3 lines with whitespace and at and then random line I wan to get it to logstash as a single event.
My filebeat config

      pattern: '^[[:space:]]+|^java'
      negate: false
      match: after

with this i can achieve 2 event but i need one message last string doesn't involve

can anyone help me please?

Assuming you are using filebeat 5.0, pleae have a look here: You can use this to test your own regexp against your pattern.

Please be patient when you open a question. If you need commercial support have a look at:

thanks ruflin
but I use filebeat 1.3.1 and I've already read this article but can't sort out how to solve it completely

normal log lines start with year and trace never start with a digit? => Use a pattern checking for a digit pattern: '^[[:digit:]]'

1 Like

thanks steffens good idea i wiil try

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.