Multiline pattern for filebeat to parse logs in logstash

Elastic Stack Elasticsearch
1

Logfile:
2017/11/21 04:40:05 [info] [application] free User upgrade to Premium Report Generation Ends.Today Date ::2017-11-21 04:40:05
2017/11/21 03:55:02 [info] [application] Upgrade to premium - Input data from dashboard ::stdClass Object
(
[userId] => 193300
[signUpType] => user_upgrade
)

i created multiline in filebeat, but it doesnt work fine. any one help me

multiline.pattern: "^[[:digit:]]{4}[[:graph:]]{/}[[:digit:]]{2}[[:graph:]]{/}[[:digit:]]{2}"

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.