Hi, Logs: [2017-05-25 01:00:00,647][ERROR][marvel.agent.exporter.local] local exporter [default_local] - ... [2017-05-18 00:00:06,339][DEBUG][action.admin.indices.create] [data-2] [data-may-2017,data-apr-.. When i am sending logs from filebeat to logstash through multiline codec in the filebeat …

You seem to be using grok syntax in the Filebeat config, which I suspect is why it is not working. Have a look at the example in the documentation to see what it should look like. Change this and remove the multiline codec from the beats input and see if that helps.

Multiline is not working when i am sending logs to logstash through filebeat?

Elastic Stack Beats

system (system) Closed July 2, 2017, 9:10am 6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Filebeat multiline works only in pair with logstash Beats	3	537	February 16, 2018
Filebeat multiline codec not working in my case Beats filebeat	3	3855	June 6, 2017
Filebeat with multiline vs. multiline logstash codec Beats filebeat	8	4549	July 5, 2017
Multiline codec applied (without multiline in logs) Beats filebeat	5	843	April 25, 2017
Multiline codec in Filebeat is not working Beats filebeat	5	1474	August 7, 2017

Multiline is not working when i am sending logs to logstash through filebeat?

Related topics