# Logstash output to tcp error it a signlge line that not ok

**URL:** <https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416>\
**Category:** Logstash\
**Created:** [April 10, 2018, 5:08am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416 "2018-04-10T05:08:56Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![zqc0512](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zqc0512/32/32141_2.png) [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Post date:** [April 10, 2018, 5:08am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/1 "2018-04-10T05:08:56Z")

</div>

i have josn data use udp listener and output to tcp server .  
to tcp server is the date is a single line . i don't want to a signlge line. need many lines.  
i find this at [https://www.elastic.co/guide/en/logstash/5.6/plugins-outputs-tcp.html#plugins-outputs-tcp-message\_format](https://www.elastic.co/guide/en/logstash/5.6/plugins-outputs-tcp.html#plugins-outputs-tcp-message_format)

```
message_format (DEPRECATED) 
DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
Value type is string
There is no default value for this setting.
The format to use when writing events to the file. This value supports any string and can include %{name} and other dynamic strings.

If this setting is omitted, the full json representation of the event will be written as a single line.

```

but i don't know **the value about message\_format**?  
is setting `message_format => "json"` ?

thanks.

by andy\_zhou

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 10, 2018, 6:02am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/2 "2018-04-10T06:02:00Z")

</div>

It's not clear what you want to do. Do you want the tcp output to send each event as JSON? Or plain text spread over multiple lines?

---

<div class="post-metadata">

**Author:** ![zqc0512](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zqc0512/32/32141_2.png) [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Post date:** [April 10, 2018, 6:08am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/3 "2018-04-10T06:08:47Z")

</div>

out put to tcp as json one event is a line .  
the input is many json events (use nc -4u import test ) is multiple lines.  
but output to tcp server it know a signlge line json file .  
i want the output is multiple lines. each line type is json .

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 10, 2018, 6:23am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/4 "2018-04-10T06:23:52Z")

</div>

Just use the json\_lines codec.

```nohighlight
tcp {
  ...
  codec => json_lines
}

```

---

<div class="post-metadata">

**Author:** ![zqc0512](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zqc0512/32/32141_2.png) [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Post date:** [April 10, 2018, 6:24am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/5 "2018-04-10T06:24:56Z")

</div>

this is output or input ? i add input not ok.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 10, 2018, 6:40am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/6 "2018-04-10T06:40:12Z")

</div>

Output.

---

<div class="post-metadata">

**Author:** ![zqc0512](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zqc0512/32/32141_2.png) [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Post date:** [April 10, 2018, 6:43am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/7 "2018-04-10T06:43:59Z")

</div>

thanks so much  
slove it .  
i don't find this  
`codec => json_lines` in the docs at [https://www.elastic.co/guide/en/logstash/5.6/plugins-outputs-tcp.html#plugins-outputs-tcp](https://www.elastic.co/guide/en/logstash/5.6/plugins-outputs-tcp.html#plugins-outputs-tcp)  
that so bad.  
the other question  
**is all `codec plugin` [https://www.elastic.co/guide/en/logstash/5.6/codec-plugins.html](https://www.elastic.co/guide/en/logstash/5.6/codec-plugins.html) can add at input or output?**  
thanks.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 10, 2018, 7:08am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/8 "2018-04-10T07:08:01Z")

</div>

> i don't find this  
> codec =\> json\_lines in the docs at [Tcp output plugin | Logstash Reference [5.6] | Elastic](https://www.elastic.co/guide/en/logstash/5.6/plugins-outputs-tcp.html#plugins-outputs-tcp)  
> that so bad.

The codec option is documented and links to [Structure of a Config File | Logstash Reference [6.2] | Elastic](https://www.elastic.co/guide/en/logstash/6.2/configuration-file-structure.html#codec).

> the other question  
> is all codec plugin [Codec plugins | Logstash Reference [5.6] | Elastic](https://www.elastic.co/guide/en/logstash/5.6/codec-plugins.html) can add at input or output?

Some of the codecs are specific to inputs or outputs but I think most of them can be used with but inputs and outputs.

---

<div class="post-metadata">

**Author:** ![zqc0512](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zqc0512/32/32141_2.png) [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Post date:** [April 10, 2018, 7:29am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/9 "2018-04-10T07:29:04Z")

</div>

thanks so.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 8, 2018, 7:29am UTC](https://discuss.elastic.co/t/logstash-output-to-tcp-error-it-a-signlge-line-that-not-ok/127416/10 "2018-05-08T07:29:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.