# Miltiline filter pattern

**URL:** <https://discuss.elastic.co/t/miltiline-filter-pattern/116089>\
**Category:** Logstash\
**Created:** [January 18, 2018, 3:27pm UTC](https://discuss.elastic.co/t/miltiline-filter-pattern/116089 "2018-01-18T15:27:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Telstra\_Aus](https://avatars.discourse-cdn.com/v4/letter/t/958977/32.png) [@Telstra\_Aus](https://discuss.elastic.co/u/Telstra_Aus)\
**Post date:** [January 18, 2018, 3:27pm UTC](https://discuss.elastic.co/t/miltiline-filter-pattern/116089/1 "2018-01-18T15:27:53Z")

</div>

Hi,

can you please help me with multiline filters, below is the exception that i need to capture  
\<\> [Jan 17 17:04:24] [[ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [CM] [ABPBatchUser] ======Error Stack Trace : =========  
amdocs.csm3g.exceptions.CMException: (CM1-001013) The node info or the related details are not availabile for the subscriber.  
at amdocs.csm3g.datacontrol.entities.Unit.validateActivityAllowedOnUnit(Unit.java:1474)  
at amdocs.csm3g.flowcontrol.helpers.UnitHelper.validateActivityAllowedOnUnit(UnitHelper.java:49)  
at amdocs.csm3g.datacontrol.entities.InternalSubscriber.validateAndSetStatus(InternalSubscriber.java:1045)  
at amdocs.csm3g.flowcontrol.SubscrSrvAgrConvFC.setSubscriberIdInfo(SubscrSrvAgrConvFC.java:240)  
at amdocs.csm3g.flowcontrol.SubscriberServicesAddOfferWithRelatedOffersFC.addOffer(SubscriberServicesAddOfferWithRelatedOffersFC.java:68)  
at amdocs.csm3g.local.implementation.SubscriberServicesAddOfferWithRelatedOffersProxy.addOffer(SubscriberServicesAddOfferWithRelatedOffersProxy.java:1237)  
at amdocs.csm3g.flowcontrol.CM9SubscriberServicesAddOfferFC.l9AddOffer(CM9SubscriberServicesAddOfferFC.java:411)  
at amdocs.csm3g.local.implementation.CM9SubscriberServicesAddOfferProxy.l9AddOffer(CM9SubscriberServicesAddOfferProxy.java:519)  
at amdocs.csm3g.sessions.implementation.SubscriberServicesBean.l9AddOffer(SubscriberServicesBean.java:18499)  
at amdocs.csm3g.sessions.implementation.SubscriberServicesBean\_gl6i2n\_EOImpl.\_\_WL\_invoke(Unknown Source)  
at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invokeInternal(SessionRemoteMethodInvoker.java:54)  
at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:21)  
at amdocs.csm3g.sessions.implementation.SubscriberServicesBean\_gl6i2n\_EOImpl.l9AddOffer(Unknown Source)  
at amdocs.csm3g.sessions.implementation.SubscriberServicesBean\_gl6i2n\_EOImpl\_WLSkel.invoke(Unknown Source)  
at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:645)  
at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:246)  
at weblogic.rmi.internal.BasicServerRef$2.run(BasicServerRef.java:534)  
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:368)  
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:163)  
at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:531)  
at weblogic.rmi.internal.wls.WLSExecuteRequest.run(WLSExecuteRequest.java:138)  
at weblogic.invocation.ComponentInvocationContextManager.\_runAs(ComponentInvocationContextManager.java:348)  
at weblogic.invocation.ComponentInvocationContextManager.runAs(ComponentInvocationContextManager.java:333)  
at weblogic.work.LivePartitionUtility.doRunWorkUnderContext(LivePartitionUtility.java:54)  
at weblogic.work.PartitionUtility.runWorkUnderContext(PartitionUtility.java:41)  
at weblogic.work.SelfTuningWorkManagerImpl.runWorkUnderContext(SelfTuningWorkManagerImpl.java:640)  
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:406)  
at weblogic.work.ExecuteThread.run(ExecuteThread.java:346)  
\<\> [Jan 17 17:04:24] [[ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [CM] \<SubscriberServicesBean.l9AddOffer\> encountered an exception. This bean uses Container-Managed transactions. Hence, this flow will NOT be retried. Last retry count = \<0 out of 0\>  
\<\> [Jan 17 17:04:26] [[ACTIVE] ExecuteThread: '36' for queue: 'weblogic.kernel.Default (self-tuning)'] [CM] \<SubscriberServicesBean.l9getICCIDAttributeDetails\> encountered an exception. This bean uses Container-Managed transactions. Hence, this flow will NOT be retried. Last retry count = \<0 out of 0\>

i want to capture from \<\< till next immediate \<\< as one message.

I am using below filter pattern  
{  
pattern =\> "(^d+s\<\<)|(^.+Exception: .+)|(^s+at .+)|(^s+... d+ more)|(^s\*Caused by:.+)"  
negate =\> true  
what =\> "previous"  
}

but instead of capturing the one exception part it capturing the entire thing.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 15, 2018, 3:33pm UTC](https://discuss.elastic.co/t/miltiline-filter-pattern/116089/2 "2018-02-15T15:33:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.