# Multiline not combining lines - GO play matches

**URL:** https://discuss.elastic.co/t/multiline-not-combining-lines-go-play-matches/104743
**Category:** Beats
**Tags:** filebeat
**Created:** [October 20, 2017, 6:31pm UTC](https://discuss.elastic.co/t/multiline-not-combining-lines-go-play-matches/104743 "2017-10-20T18:31:20Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![svanschalkwyk](https://avatars.discourse-cdn.com/v4/letter/s/8baadc/32.png) [@svanschalkwyk](https://discuss.elastic.co/u/svanschalkwyk)
#### Post date: [October 20, 2017, 6:31pm UTC](https://discuss.elastic.co/t/multiline-not-combining-lines-go-play-matches/104743/1 "2017-10-20T18:31:20Z")

</div>

[SOLVED] - multiline.\* settings were not indented correctly.  
Filebeats configtest did not pick this up.

Hi,  
I'm ingesting SOLR logs. The logs have a datetime stamp on the first line and the information on the second.

Date lines start with  
"Oct 17, 2017 1:09:46 PM org.apache.solr.request.UnInvertedField uninvert" etc.

My match pattern is  
"^(Jan(uary)?|Feb(ruary)?|Mar(ch)?|Apr(il)?|May|Jun(e)?|Jul(y)?|Aug(ust)?|Sep(tember)?|Oct(ober)?|Nov(ember)?|Dec(ember)?)"

The GO Play test is here:  
[https://play.golang.org/p/UbIZLhgrKb](https://play.golang.org/p/UbIZLhgrKb)  
Line 1 true  
Line 2 false  
Line 3 true.......  
In filebeats.yml has negate: true, match: after

Any idea why Filebeats is not combining lines?

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [October 24, 2017, 12:49pm UTC](https://discuss.elastic.co/t/multiline-not-combining-lines-go-play-matches/104743/2 "2017-10-24T12:49:25Z")

</div>


