Hello, I am having problems making a multiline match. The logs come from a file saved on the client machine. I send to the logstash server with filebeat. In the filebeat configuration I have the following: multiline.pattern: '^%{LOGLEVEL} %{TIMESTAMP_ISO8601} \[' multiline.negate: true multiline.ma…

Hello again tek, I have already found the error, in the pattern that you had passed me a - like this: multiline.pattern: '[A-Z]{5} [0-9]{4}[0-9]{2}-[0-9]{2}' multiline.pattern: '[A-Z]{5} [0-9]{4}-[0-9]{2}-[0-9]{2}' Thanks for the replys!!

Discuss the Elastic Stack

Multiline Pattern - Filebeat

Elastic Stack Beats

Tek_Chand (Tek Chand) September 16, 2019, 9:21am 2

@gerard.ramos,

Please try the below pattern in multiline.pattern

multiline.pattern: '[A-Z]{5} [0-9]{4}-[0-9]{2}-[0-9]{2}'

Thanks.

Topic		Replies	Views
Multiline patter not working for filebeat Beats filebeat	2	263	May 1, 2019
Multiline configuration Beats filebeat	7	2053	August 29, 2016
Filebeats multiline pattern help Beats filebeat	2	718	September 17, 2018
Filebeat multiline pattern is not working Beats filebeat	2	304	February 24, 2020
Multiline troubleshooting Beats filebeat	3	794	November 25, 2016

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Multiline Pattern - Filebeat

Related topics