# Newline characters in syslog output

**URL:** <https://discuss.elastic.co/t/newline-characters-in-syslog-output/239279>\
**Category:** Logstash\
**Created:** [June 30, 2020, 11:18am UTC](https://discuss.elastic.co/t/newline-characters-in-syslog-output/239279 "2020-06-30T11:18:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![brandonstark](https://avatars.discourse-cdn.com/v4/letter/b/d2c977/32.png) [@brandonstark](https://discuss.elastic.co/u/brandonstark)\
**Post date:** [June 30, 2020, 11:18am UTC](https://discuss.elastic.co/t/newline-characters-in-syslog-output/239279/1 "2020-06-30T11:18:41Z")

</div>

My incoming syslog has newline characters.  
In Kibana I see the messages as multiline text.  
The outgoing syslog messages change the newlines to literal "\n".  
For example, the incoming message:

> incoming  
> message

appears in the syslog output as:

> incoming\nmessage

How do I get the outgoing syslog messages to have newline characters, as the incoming syslog message does?

This is my pipeline:

```auto
input {
    syslog {
        grok_pattern => "<%{POSINT:priority}>%{GREEDYDATA:syslogmessage}"
    }
}
output {
    elasticsearch { 
        hosts => ["elasticsearch:9200"]
    }
    syslog {
        host => "10.4.1.4"
        port => 514
        message => "%{syslogmessage}"
    }
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 28, 2020, 11:18am UTC](https://discuss.elastic.co/t/newline-characters-in-syslog-output/239279/2 "2020-07-28T11:18:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.