Logstash merge event,need help!

Hi ,I want to merge some events ,but i did not find any plugin could work.My data like this:
H Comware Platform Software
Comware Software, Version 5.20, Release 2202
Copyright (c) 2004-2009 Hhu.
H S-C-E uptime is 77 weeks, 3 days, 20 hours, 57 minutes
I want to merge the 2rd line and 4th line:
Comware Software, Version 5.20, Release 2202 H S-C-E uptime is 77 weeks, 3 days, 20 hours, 57 minutes
How can i make it work ? Please

What does your config look like?

We have to know where you are getting your data from because then we can suggest multiline etc so that you can get those lines into one event.

If you have multiple events, one per line, then your question becomes near to impossible to solve.

LS does not guarantee event ordering - worker threads can be working on events in parallel and each filter treats each event as if its never seen any previous events.

THANKS,I got logs from H3C device,and lots of data is useless, I just need some of it. but what i need it is not continuous, so i want to extract some line to merge. is this could work? or use some other tool?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.