Multiline max_lines not set


I'm working on harvesting large csv files using multiline option and It looks like that default option of multiline.max_lines is not overriden by value set in filebeat.yml

When filebeat is parsing record which takes more than 500 lines he stops on 500th line and incomplete record is published to output.

I am using filebeat 5.1.2 in docker on ubuntu image

Here are configuration and results of parsing sample file:
Published record should have all lines from 0001 to 999.

I also set multiline.timeout: 10s but result was same

looks like a typo: multiline.max_linex: 10000

You are right. :frowning: I focused on changing value...
Thanks @steffens and sorry for wasting time

Thread can be closed

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.