# Log type Filebeat deprectaed and Filestream multiline doesn't works

**URL:** <https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 18, 2022, 8:51am UTC](https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577 "2022-02-18T08:51:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![retina](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@retina](https://discuss.elastic.co/u/retina)\
**Post date:** [February 18, 2022, 8:51am UTC](https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577/1 "2022-02-18T08:51:54Z")

</div>

I upgrade one filebeat to 7.16.3 version.

When i config my filebeat as always with this config:

```auto
- type: log
  enabled: true
  paths:
    - xx/yy.log
    - xx/yy.log
    - xx/yy.log

  tags: ["1","2"]

  encoding: ISO-8859-1
  multiline.type: pattern
  multiline.pattern: '^\[(?:0?[1-9]|1[0-2])[/-](?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9])[/-](?>\d\d){1,2}'
  multiline.negate: true
  multiline.match: after

```

throws the following message in the log and no data is sent

`DEPRECATED: Log input. Use Filestream input instead. Will be removed in version:`

so i try the filestream type instead with this config:

```auto
# parsers:
# - multiline:
# type: pattern
# pattern: '^\[(?:0?[1-9]|1[0-2])[/-](?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9])[/-](?>\d\d){1,2}'
# negate: true
# match: after

```

but it doesn't seem to work properly.

Wich is the correct syntax to make it works with filestream method ???

Thank you in advanced!

---

<div class="post-metadata">

**Author:** ![fgjensen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fgjensen/32/62320_2.png) [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Post date:** [February 18, 2022, 8:08pm UTC](https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577/2 "2022-02-18T20:08:03Z")

</div>

Please, tak a look at [this thread.](https://discuss.elastic.co/t/filebeat-filestream-input-parsers-multiline-fails/290543)

It answers your question.

Best regards  
Flemming

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 18, 2022, 10:08pm UTC](https://discuss.elastic.co/t/log-type-filebeat-deprectaed-and-filestream-multiline-doesnt-works/297577/3 "2022-03-18T22:08:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.