Hello EveryOne, I send data with filebeat and I want to use mutiline. Every event start with date like this : 2017-06-12T15:52:56.201_I_I_01de02a1ec3d0b28 [07:48] func will be continued(0,0000000001800094) In logstash I used the following pattern : pattern => "^%{TIMESTAMP_ISO8601}" But with fil…

See go playground: https://play.golang.org/p/Q9AP0A6c5A You regular expression seems invalid (well, still compiles), as you did escape the [ operator, such that is becomes a match on the [ character. Try with multiline pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'

Discuss the Elastic Stack

Mutiline pattern Filebeat

Elastic Stack Beats

Sam67000 (Samir) June 30, 2017, 9:36am 4

Someone could help ?

Topic		Replies	Views
Filebeat multiline pattern is not working Beats filebeat	2	304	February 24, 2020
Multiline.pattern: '^\[[0-9]{4}-[0-9]{2}-[0-9]{2}' not working Beats filebeat	12	4846	July 27, 2017
How to use Multiline Beats filebeat	5	3375	July 5, 2017
Multiline patter not working for filebeat Beats filebeat	2	263	May 1, 2019
Problem with Multiline pattern in Filebeat Beats filebeat	8	2674	August 3, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Mutiline pattern Filebeat

Related topics