Windows filebeat 6.2.3 My multiline pattern works great, and want to know if I can also filter out sending those patterns? multiline.pattern: '^[-]{6,}[ ]Event Log Start Here[ ][-]{6,}' multiline.negate: true multiline.match: after multiline.flush_pattern: '^[-]{6,}[ ]Event Log End Here[ …

I think that's not possible, you may need to use Logstash to filter these using a pipeline

Multiline match pattern but don't send it

JimP (James Peppercorn ) March 24, 2018, 1:02pm 3

Thank, I was just logging on to write the same thing. Logstash, here I come!@

Topic		Replies	Views
Multiline Pattern not Working Beats filebeat	1	534	October 7, 2019
Mutiline pattern Filebeat Beats filebeat	6	1499	July 28, 2017
Multiline sends unmatched multiline beginning of file #1611 Beats filebeat	8	1412	July 5, 2017
Filebeat multiline pattern is not working Beats filebeat	2	304	February 24, 2020
Configure multi line in logstash error with multi input file Logstash	1	549	March 13, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Multiline match pattern but don't send it

Related topics