Hi, I have a simple filebeat configuration sending the output of a tomcat server to my logstash - type: log paths: - '/home/appserver/logs/catalina.out' tags: [swtp] multiline.pattern: '^[[:space:]]+(at|\.{3})\b|^Caused by:' multiline.negate: false multiline.match: after My logstas…

Repeated message

CyberSeppi October 25, 2018, 6:28pm 3

Multiline pattern was wrong, indeed
Many thanks for rubbing my nose into it

1 Like

Topic		Replies	Views
Multi line pattern for different services to one logstash Beats filebeat	8	775	November 30, 2018
Filebeat don't send send proper multiline messages on logstash Beats filebeat	5	1774	August 23, 2018
Multiline issue with 2 different patterns for a single event Logstash	13	1495	July 6, 2017
Messages from different files are combined as one document Beats filebeat	3	956	July 5, 2017
Duplicate Entries for multiline log processed by Logstash Logstash	1	748	December 21, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Repeated message

Related topics