Multiline filter failure in filebeat


I am trying to parse a log file in multiline format and each new linestarts with the date :

28-Sep-2020 18:26:19.982

I tried to configure the config as below

- type: log
    - /catalina.out
  multiline.pattern: '^\%{MONTHDAY}'
  multiline.negate: true
  multiline.match: after

However, it does not seem to be working...I found that the entire log file has been written as a single entry...How do I fix this?

Any suggestions on this ?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.