Multiline defined in filebeat will not work in logstash

I have a classic ELK environment. I have configured some single line and some multiline propectors in my filebeat config. I have check the logs of filebeat and filebeat is sending correctly both my multiline and single line logs but when I check in Kibana, only my single line logs appear. I think the problem might be with the config on my logsatsh but I don't know what is the problem. I have read that if you already have the multiline config in filebeat, there is no need to addapt your logstash but I am not sure of that.

Any ideas?

Please share your input configuration in Filebeat...

We can only say what is the issue based on your configuration

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.