# Showing multiline messages as "multi lines?"

**URL:** <https://discuss.elastic.co/t/showing-multiline-messages-as-multi-lines/76334>\
**Category:** Logstash\
**Created:** [February 24, 2017, 2:20am UTC](https://discuss.elastic.co/t/showing-multiline-messages-as-multi-lines/76334 "2017-02-24T02:20:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ZillaG](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zillag/32/10505_2.png) [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Post date:** [February 24, 2017, 2:20am UTC](https://discuss.elastic.co/t/showing-multiline-messages-as-multi-lines/76334/1 "2017-02-24T02:20:20Z")

</div>

I use the ELK stack as my central log server, and I have all the parts working so now I'm tweaking it.

I see some of my logs (sent remotely via rsyslog) have "\n" in them, that is I literally see the "\n" characters. How can I setup my LS filters to translate this as a CR or LF so when I view the logs in Kibana, I see multiple lines?

---

<div class="post-metadata">

**Author:** ![ZillaG](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zillag/32/10505_2.png) [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Post date:** [March 1, 2017, 6:25pm UTC](https://discuss.elastic.co/t/showing-multiline-messages-as-multi-lines/76334/2 "2017-03-01T18:25:52Z")

</div>

Anyone? I have also posted [In Logstash how do I translate lines with literal “\n” or “\t” to LFs and tabs?](http://stackoverflow.com/questions/42519507/in-logstash-how-do-i-translate-lines-with-literal-n-or-t-to-lfs-and-tabs) in Stackoverflow, but i don't get answers there either. Seems like this should be common place activity.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 29, 2017, 6:25pm UTC](https://discuss.elastic.co/t/showing-multiline-messages-as-multi-lines/76334/3 "2017-03-29T18:25:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
