filebeat.inputs: - type: filestream enabled: true paths: - /var/tmp/javatest/simplejava.log json.keys_under_root: true json.add_error_key: false json.ignore_decoding_error: true json.overwrite_keys: true multiline: pattern: '[0-9]{4}-[0-9]{2}-[0-9]{2}' negate: true match: af…

No you're multi-line syntax is not correct. That syntax is from the old deprecated log type input. [image] Manage multiline messages | Elastic Documentation The files harvested by Filebeat may contain messages that span multiple lines of text. For example, multiline messages are common…

Discuss the Elastic Stack

Multiline stack trace not working

Elastic Stack Beats

stephenb (Stephen Brown) May 19, 2025, 11:50pm 2

No you're multi-line syntax is not correct.

That syntax is from the old deprecated log type input.

Topic		Replies	Views
Filebeat multiline setting not working Beats filebeat	3	386	September 5, 2019
Filebeat.inputs journald: Multiline not working Beats filebeat	4	1053	February 16, 2022
Filebeat multi line pattern not working Beats filebeat	6	41	May 20, 2025
Filebeat multiline works as single liners Beats filebeat	2	590	March 4, 2019
Multi-line Filebeat templates don't work with filebeat.inputs - type: filestream Beats filebeat	2	2854	December 9, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Multiline stack trace not working

Related topics