Matching a word with filebeat multiline

(Lakshmi) #1

I am using Filebeat multiline pattern in filebeat.yml that is taking its input from a single file that has the following line indicating the start of a request

2016-10-06 09:40:01.775 DEBUG 10454 --- [XNIO-2 task-9] requestStartIdentifier: Identifier


pattern: 'Identifier$'
negate: false
match: after

I use the above config to match 'Identifier ' in the line . can anyone please suggest me the pattern to select whole string in the line that ends with Identifier .

(Tudor Golubenco) #2

Can you post a longer portion of the log file and how you want it grouped together. It's not clear to me what the requirement is. Thanks.

(Andrew Kroh) #3

Looks like a duplicate of which has a working answer.

(system) #4

This topic was automatically closed after 21 days. New replies are no longer allowed.