We are running Java applications inside docker containers. We use
file input with
json codec to parse their logs. Unfortunately Java is known to throw stack traces and docker creates a single json entry for every log line. With plain files we can use
multiline codec to join them into a single event but how to use it with json? It looks like filebeat can be used instead but version 6.8 we have to use now doesn't support other required features, so is it possible to use just
logstash in this scenario?