Hi, I am trying to get logs whose are on two different lines : [2019-06-18T06:57:32.032Z] [org.kie.api.internal.utils.tydhiks] [main] [141] [INFO ] Adding Service org.drools.core.concurrent.EEEeeF In my logstash I tried : grok { patterns_dir => "/u01/app/elk-config/logstash/patterns" …

Hi, Have a look at this. Sounds similar to what you are trying to achieve https://www.elastic.co/guide/en/logstash/current/multiline.html#_timestamps

Discuss the Elastic Stack

Logs on two lines

Elastic Stack Logstash

kentatoi June 28, 2019, 12:17pm 5

No It's the same issue my log message is split .

Topic		Replies	Views
Matching multiline log message with Grok Logstash	4	331	February 20, 2019
Logstash multiline Bug Logstash	2	1101	July 6, 2017
Log event with multi-line Logstash	5	499	March 26, 2018
Different lines structure for same log Logstash	5	1486	February 17, 2017
Logstash Grok Filter breaks Single log line as 2 lines Logstash	2	572	October 25, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logs on two lines

Related topics