Multiline data to correlate into single line

Elastic Stack Logstash
1

Hi Guys,
Need some help
I have the data in this format
[2020-11-27] [data] [country:India] [Capital:Delhi]
[2020-11-27] [data] [country:India] [Currency:INR]
[2020-11-27] [data] [country:India] [PM:Modi]
[2020-11-27] [data] [country:India] [President:kovindh]
But I need it like below format.
[2020-11-27] [data] [country:India] [Capital:Delhi] [Currency:INR] [PM:Modi] [President:kovindh]
Is it possible to make it through ELK.

Need some help..

2

You could use an aggregate filter. Something like example 3 in the documentation.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.