Multiline logs

Elastic Stack Elastic Agent
1

Hi,
I use custom logs integration to process custom logs, but this integration does not connect the multi-lines below: Custom logs configuration and sample log.
Config in Custom Log:
filebeat.inputs:

  • type: filestream
    enabled: true
    paths:
    • /data/tomcat/logs/server.log*
      parsers:
    • multiline:
      type: pattern
      pattern: '[1]{2}:[0-9]{2}:[0-9]{2}.[0-9]{3}'
      negate: true
      match: after
      Example log:
      08:47:23.519 [cdad0e83-ee52-4891-8705-e67a878912e8] [INFO] [interceptor.RequestAndResponseLoggingFilter] [http-nio-8080-exec-13] :
      -- RESPONSE --
      716b4394-11e4-4b87-8604-4cc8d0359801|< 200 OK
      716b4394-11e4-4b87-8604-4cc8d0359801|<
      716b4394-11e4-4b87-8604-4cc8d0359801|< body:
      716b4394-11e4-4b87-8604-4cc8d0359801|< {"customerSearchCrmPOSTResponseBody":{"results":[{"customer":{"status":"Active","creationDate":"2023-05-12","customerId":30541,"customerType":"Company","companyName":"Wilderman, Pfeffer and Greenfelder","companyOwnName":"Wilderman, Pfeffer and Greenfelder","companyLegalFormCode":"State","identificationCountryCode":"PL","identificationNumber":"3743815847","identificationType":"NIP"},"address":{"addressId":70769,"countryCode":"PL","postCode":"80-721","city":"GDAŃSK","street":"PROSTA","buildingNumber":"1","addressType":"Main"},"contactDetails":{"mainEmailAddress":"xxxxx@gmail.com","mainPhoneNumber":"888999777"}}],"searchParams":{"offset":0,"limit":10,"total":1,"andOrOperator":"and","sortOrder":"asc"}},"commonResponse":{"commonResponseBody":{"requestId":"cdad0e83-ee52-4891-8705-e67a878912e8","responseId":"1748ebe7dfb8e5"}}}

  1. 0-9 ↩︎

2

Ok its working with this config in custom configuration:
multiline:
type: pattern
pattern: '[1]{2}:[0-9]{2}:[0-9]{2}.[0-9]{3}'
negate: true
match: after

  1. 0-9 ↩︎