Messages truncated

Elastic Stack Logstash
1

Hello Folks:

I have filebeat configured to send the wildfly logs to logstash. They're coming in but I see that the messages themselves, are being truncated. So far the index is using default mapping. I set the truncate:maxHeight to zero so that I can see the whole message, but it only shows a small portion.

This is the filebeat.yml file:

filebeat.prospectors:

  • input_type: log
    paths:
    - /var/log/wildfly/server.log
    document_type: sandbox

output.logstash:
hosts: ["1.2.3.4:5044"]

This is the output file in logstash:
output {
elasticsearch {
hosts => ["localhost:9200"]
sniffing => true
manage_template => false
index => "%{[@metadata][type]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}

What's the optimal approach to capturing the entire logs, stack trace and all?? Please advise.

Thanks,

2

Please reformat your post, it's difficult to read :slight_smile:

3

should look better now :slight_smile:

4

I found the answer already.

https://www.elastic.co/guide/en/beats/filebeat/1.2/multiline-examples.html

Thanks,

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.