Need help with multiline pattern in complex log file

Elastic Stack Beats
1

All logs start with the following

2018-10-29T14:42:32,484 DEBUG [7DDvqyNAoe6UmkmcfvP8hw]

Which to me looks like
Timestamp,MessageType TypeOfLog [MessageID]

How would i create a multiline filter for this in filebeat?

2

Hi @Ryan_Ivis and welcome :slight_smile:

You can find in the documentation some examples of multiline configuration, there you can find one based on timestamps, something like this could fit for your case.

3

Thanks!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.