I am using Logstash to parse my multiline logs. I have used multiline in filebeat. I am able to use grok filter for the first line of the log. But the pattern is not same for all multiline logs. For example, my logs are: [timestamp] [bla] [bla] [[ A at bla at bla B C at bla ]] I want info…

Parsing multiline logs in Logstash

Adam_Szabo June 16, 2017, 11:42am 2

Maybe it's the aggregate plugin which you're looking for?
https://www.elastic.co/guide/en/logstash/current/plugins-filters-aggregate.html

Topic		Replies	Views
Multiline log (array) with logstash Logstash	1	636	July 6, 2017
Can't parse multiline logs with grok Logstash	4	4602	June 1, 2018
Can't grok multiline logs Logstash	2	740	December 4, 2017
Multiline issue with log Logstash	6	330	August 15, 2018
Parsing multiline logs Beats filebeat	4	623	February 26, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Parsing multiline logs in Logstash

Related topics