Module and multiline

Elastic Stack Beats
1

I have a question. Is it possible to add the options of multiline in the filebeat module ?

I have this config at the moment

- module: system
  # Syslog
  syslog:
    enabled: true
2

Hi @flochon,

You can override prospector settings, have a look at https://www.elastic.co/guide/en/beats/filebeat/6.2/advanced-settings.html

I'm wondering, why do you need to do that?

Best regards

3

I find my response with this.
Thank you.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.