Problem while use multiline in logstash 5.3.1


(manojkumar) #1

Hi Buddy

im using logstash 5.3.1

my conf is

input {
file {
path => "C:/pratik/Digital/softwares/logs/search.log"
start_position => "beginning"
codec => multiline {
# Grok pattern names are valid!
pattern => "^%{TIMESTAMP_ISO8601} "
negate => true
what => previous
}
}
}
output {
elasticsearch {
hosts => "localhost:9200"
}
stdout { codec => rubydebug }
}

i loaded conf
logstash -f file-combine.conf

cmd prmpt showing like this

18:18:21.403 [[main]-pipeline-manager] INFO logstash.pipeline - Pipeline main started
18:18:21.591 [Api Webserver] INFO logstash.agent - Successfully started Logstash API endpoint {:port=>9600}

json not generated .log not loaded into elastic search can any one help me.


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.