# Multi-line configuration with the filebeat

**URL:** <https://discuss.elastic.co/t/multi-line-configuration-with-the-filebeat/227673>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 12, 2020, 1:49pm UTC](https://discuss.elastic.co/t/multi-line-configuration-with-the-filebeat/227673 "2020-04-12T13:49:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ganesh\_Bhosale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_bhosale/32/50604_2.png) [@Ganesh\_Bhosale](https://discuss.elastic.co/u/Ganesh_Bhosale)\
**Post date:** [April 12, 2020, 1:49pm UTC](https://discuss.elastic.co/t/multi-line-configuration-with-the-filebeat/227673/1 "2020-04-12T13:49:27Z")

</div>

Hello,  
I am having challenges to set up the filebeat to honor multiline configurations so I need your help. I am configuring filebeat to ship the logs from linux servers where large number of docker containers are running so I want to be selective about which container logs to enable for filebeat and I used " **hints.default\_config.enabled: false**" for it from **filebeat.autodiscover** and utilized the docker labels to " **co.elastic.logs/enabled=true**" target docker containers. This works fine but I am unable to determine how to enable multiline configuration. I tried to leverage my "container" type in **filebeat.input** but with that multiline configuration works but logs of all of the containers starts shipping. In other words. filebeat ignores chosen targets via auto-discovery.

```auto
filebeat.autodiscover:
  providers:
- type: docker
  hints.enabled: true
  hints.default_config.enabled: false

```

My entire filebeat.docker.yml file looks like this.

```auto
filebeat.config:
  modules:
    path: ${path.config}/modules.d/*.yml
    reload.enabled: false

filebeat.autodiscover:
  providers:
    - type: docker
      hints.enabled: true
      hints.default_config.enabled: false

processors:
- add_cloud_metadata: ~
- add_docker_metadata:
    host: "unix:///var/run/docker.sock"

output.console:
  pretty: true

```

Please suggest the how would I achieve multiline configuration while retaining auto discovery solution to select only appropriate docker containers through docker labels.

---

<div class="post-metadata">

**Author:** ![Ganesh\_Bhosale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_bhosale/32/50604_2.png) [@Ganesh\_Bhosale](https://discuss.elastic.co/u/Ganesh_Bhosale)\
**Post date:** [April 21, 2020, 12:24pm UTC](https://discuss.elastic.co/t/multi-line-configuration-with-the-filebeat/227673/2 "2020-04-21T12:24:42Z")

</div>

Any update on this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 19, 2020, 12:24pm UTC](https://discuss.elastic.co/t/multi-line-configuration-with-the-filebeat/227673/3 "2020-05-19T12:24:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.