Reference Previous loglines

Elastic Stack Logstash
1

HI,
Is it possible to to reference a previous loglines other than using multiline to club them togethers.

Also could we use multiline in an if else loop to make sure lines correspondig to a specific event are clubbed together?

Regards,
Debarun

2

Is it possible to to reference a previous loglines other than using multiline to club them togethers.

Apart from the multiline codec/filter and the aggregate filter... not really.

Also could we use multiline in an if else loop to make sure lines correspondig to a specific event are clubbed together?

Not sure what you mean here.

3

Hi,

It might be that the loglines all start with date, but the lines 3 such loglines correspond to a specific event, and I want to tag that.

Is it possible?

Regards,
debarun.

4

I don't think there's a simple way of doing that with the standard plugins.