I tried simulating the multiline example given at link:
Below are my filebeat.yml details.
filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use different prospectors for various configurations. # Below are the prospector specific configurations. #- input_type: log - input_type: log paths: - C:\ELK\*.log multiline.pattern: '^[[:space:]]' multiline.negate: false multiline.match: after
But when I run and view the logs, the logs are coming in separate lines instead of single line. Can anyone please help. Below is the log that we are using:
Exception in thread "main" java.lang.NullPointerException
Can anyone please help.