Multiline codec plugin with no output

Elastic Stack Logstash
1

Hi,

I'm trying to use Multiline codec plugin with Logstash

config file:

input {
    file {
            path => "/path/to/file"
            start_position => "beginning"
            sincedb_path => "/dev/null"
            codec => multiline {
                            pattern => "^%{YEAR:year}"
                            negate => true
                            what => "previous"
            }
    }
output {
    elasticsearch {
            index => "multiline"
            hosts => ["localhost:9200"]
    }
}

after running the config file through the pipeline.yml it shows that pipelines are running and no errors are shown. However no results are found for the particular index in kibana.
But when starting logstash with this particular config manually:

bin/logstash –f test.config

then everything works as expected.

Can someone please help?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.