# Mutiline parsing using IngestNode pipelines

**URL:** <https://discuss.elastic.co/t/mutiline-parsing-using-ingestnode-pipelines/205187>\
**Category:** Elasticsearch\
**Created:** [October 25, 2019, 5:57am UTC](https://discuss.elastic.co/t/mutiline-parsing-using-ingestnode-pipelines/205187 "2019-10-25T05:57:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tinkerbell](https://avatars.discourse-cdn.com/v4/letter/t/ac91a4/32.png) [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\
**Post date:** [October 25, 2019, 5:57am UTC](https://discuss.elastic.co/t/mutiline-parsing-using-ingestnode-pipelines/205187/1 "2019-10-25T05:57:29Z")

</div>

Hello,  
I am using filebeat along with Ingest node pipelines to create index data.  
My indexed data looks like below screenshot.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/b/cb88a760da79d1c4c641894aaba1aadb0881c713.png)  
From the screenshot , i need to count number of ACT\_REJ after ACT\_REQ.  
Basically my use case is to calculate the number of rejections that has happened after the activation request has been sent.  
Can someone please provide any ideas or suggestions on how to implement this ?  
Either a datatable or Barchart is what i am looking for .

---

<div class="post-metadata">

**Author:** ![Tinkerbell](https://avatars.discourse-cdn.com/v4/letter/t/ac91a4/32.png) [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\
**Post date:** [October 25, 2019, 10:04am UTC](https://discuss.elastic.co/t/mutiline-parsing-using-ingestnode-pipelines/205187/2 "2019-10-25T10:04:51Z")

</div>

I am looking for some ideas from Elastic Team.. ☹

---

<div class="post-metadata">

**Author:** ![Tinkerbell](https://avatars.discourse-cdn.com/v4/letter/t/ac91a4/32.png) [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\
**Post date:** [October 29, 2019, 5:00am UTC](https://discuss.elastic.co/t/mutiline-parsing-using-ingestnode-pipelines/205187/3 "2019-10-29T05:00:21Z")

</div>

Any ideas ??!! ☹ ☹

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 26, 2019, 5:00am UTC](https://discuss.elastic.co/t/mutiline-parsing-using-ingestnode-pipelines/205187/4 "2019-11-26T05:00:23Z")

</div>

Closed on November 26, 2019, 5:00am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.