Logstash logfile manipulation

one log file is this way

When givenn as input to logstash with grok match "message":".*$", the log file is entered into ES as 

Each \n is considered new line and can see lines seperated in GUI 
But in ES, as number of lines are huge, log file is entered into es as multiple fragments each holding max possible lines (i.e 500 which may be ES default max lines)

Please suggest a mutate or ruby block which will manipulate log file into message as comma seperated lines instead of \n 


So you want that a file with multiple lines be as a single document in ES separated by commas?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.