Mysql-Slow-Log

Elastic Stack Logstash
#1

Hi everyone,

I am using filebeats to forward mysql logs to logstash , and it breaks the query to different lines. I want the complete query as a single entry unlike a single line the way logstash does.
What filter should be used ? I tried using multiline but didn't work.

1 Like
#2

A multiline filter or codec will work, but I strongly suggest that you use the newly introduced multiline feature in Filebeat. Joining lines that make up multiline messages should be done as close to the source as possible.

If you want more specific help you need to be more specific. What does the logs look like, what configuration have you tried, etc.

#3