Showing multiline messages as "multi lines?"

Elastic Stack Logstash
#1

I use the ELK stack as my central log server, and I have all the parts working so now I'm tweaking it.

I see some of my logs (sent remotely via rsyslog) have "\n" in them, that is I literally see the "\n" characters. How can I setup my LS filters to translate this as a CR or LF so when I view the logs in Kibana, I see multiple lines?

#2

Anyone? I have also posted In Logstash how do I translate lines with literal “\n” or “\t” to LFs and tabs? in Stackoverflow, but i don't get answers there either. Seems like this should be common place activity.

#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.