# Logstsash Multiline Codec with Filebeat is a must

**URL:** https://discuss.elastic.co/t/logstsash-multiline-codec-with-filebeat-is-a-must/152887
**Category:** Logstash
**Created:** [October 17, 2018, 5:22pm UTC](https://discuss.elastic.co/t/logstsash-multiline-codec-with-filebeat-is-a-must/152887 "2018-10-17T17:22:33Z")
**Posts on this page:** 1
**Showing post:** 5

<div class="post-metadata">

### Author: ![fewknow](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fewknow/32/35315_2.png) [@fewknow](https://discuss.elastic.co/u/fewknow)
#### Post date: [October 17, 2018, 7:55pm UTC](https://discuss.elastic.co/t/logstsash-multiline-codec-with-filebeat-is-a-must/152887/5 "2018-10-17T19:55:53Z")

</div>

This [Multiline codec plugin | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-codecs-multiline.html) has been deprecated in 4 months?

So you are suggesting 1 pipeline for filebeat and one for gelf inputs?

I have posted another thread about the multiline plugin not working here :

> [@Multiline plugin for logstash not working for gelf input](https://discuss.elastic.co/t/multiline-plugin-for-logstash-not-working-for-gelf-input/152908):
>
> I have configured my logstash inputs as: input { stdin { } gelf { host =\> "0.0.0.0" port =\> 12201 codec =\> multiline { pattern =\> "^\s" what =\> "previous" } } udp { codec =\> json port =\> 5001 } tcp { port =\> 5000 codec =\> json } beats { port =\> 5044 } http { port =\> 8000 type =\> "elb-healthcheck" } } I can see that the plugin is loading in logs slight_smile [2018-10-17T15:32:31,548][DEBUG][logstash.codecs.mu…

I am not familiar with multiple pipelines but I see form here([Multiple Pipelines | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/multiple-pipelines.html)) That I can just set them in the pipelines.xml and point to 2 different configurations.

I can not compress multiline at the source as it is just coming from stderr and stdout streaming to logstash using gelf protocol.

If you are suggesting 1 pipeline for filebeat and 1 for gelf that makes a little sense. I am still confused to the multi line codec plugin being deprecated?

---

_[View the full topic](https://discuss.elastic.co/t/logstsash-multiline-codec-with-filebeat-is-a-must/152887)._