Multiline filebeat parser for aws module

Elastic Stack Beats
1

Hello,
I am ingesting logs from AWS cloudwatch using the Aws input filebeat module but getting single-line logs in kibana.
image

I tried to use multiline parsers as shown in the image but still, it doesn't seem to work.

image
image920×375 27.9 KB

My requirement is to merge single-line logs into one whole log.
Using filebeat v8.3

Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.