Problem while use multiline in logstash 5.3.1

Hi Buddy

im using logstash 5.3.1

my conf is

input {
file {
path => "C:/pratik/Digital/softwares/logs/search.log"
start_position => "beginning"
codec => multiline {
# Grok pattern names are valid!
pattern => "^%{TIMESTAMP_ISO8601} "
negate => true
what => previous
}
}
}
output {
elasticsearch {
hosts => "localhost:9200"
}
stdout { codec => rubydebug }
}

i loaded conf
logstash -f file-combine.conf

cmd prmpt showing like this

18:18:21.403 [[main]-pipeline-manager] INFO logstash.pipeline - Pipeline main started
18:18:21.591 [Api Webserver] INFO logstash.agent - Successfully started Logstash API endpoint {:port=>9600}

json not generated .log not loaded into elastic search can any one help me.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.