Hi, I am trying to migrate from logstash 2.3.4 to newer 5.1.1.
After default installation (registering logstash 5.1 repo and yum install logstash)
I found that logstash cannot find "multiline' plugin.
I tried:
/usr/share/logstash/bin/logstash-plugin install logstash-codec-multiline
and it installed multiline successfully. Could see it in the list:
[root@xxxx logstash]# /usr/share/logstash/bin/logstash-plugin list | grep multil
logstash-codec-multiline
However, it still cannot find it, when I try to check configuration:
You should probably try to migrate away from the multiline filter as it has been deprecated. It is generally recommended to perform this processing as close to the sources as possible. Filebeat supports this and if you need to do it in Logstash, the multiline codec is the recommended way to go.
What you linked to is the multi line codec, not the multi line filter which has been deprecated. The multi line codec is still supported as it does not suffer from the limitations of the filter.
@Christian_Dahlqvist I'm not in a good place to edit the docs but if you get anyone to change it, someone should also add that apparently the 'auto_flush_interval' is required to make the multiline codec work. Thanks!
I have opened an issue against the Github repository containing the Logstash documentation. I have also opened another issue against the multiline codec plugin to either set a default value or add additional information about the auto_flush_interval parameter and use to the documentation.
I also faced the same error in logstash 5.1.2 version. multiline filter is removed from logstash 5.. versions. you could please try the multiline codec filter instead.
You need to use the multiline codec in the input tag not in the filter tag. For sure your problem will be solved. Kudos try it and update us.
Thanks for your response. I've implemented the codec and am still not getting any data pulled in through Logstash. I'll start another thread in an attempt to not further-hijack this thread.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.