Json parsin

I suggest you ask in the filebeat forum, its multiline feature is rather different to that in logstash.