Multiline defined in filebeat will not work in logstash


I have a classic ELK environment. I have configured some single line and some multiline propectors in my filebeat config. I have check the logs of filebeat and filebeat is sending correctly both my multiline and single line logs but when I check in Kibana, only my single line logs appear. I think the problem might be with the config on my logsatsh but I don't know what is the problem. I have read that if you already have the multiline config in filebeat, there is no need to addapt your logstash but I am not sure of that.

Any ideas?

(Joseph Johney) #2

Please share your input configuration in Filebeat...

We can only say what is the issue based on your configuration

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.