# Single line log into multiple logs
**URL:** https://discuss.elastic.co/t/single-line-log-into-multiple-logs/87595
**Category:** Beats
**Tags:** filebeat
**Created:** [May 30, 2017, 3:33pm UTC](https://discuss.elastic.co/t/single-line-log-into-multiple-logs/87595 "2017-05-30T15:33:52Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)
#### Post date: [May 30, 2017, 3:33pm UTC](https://discuss.elastic.co/t/single-line-log-into-multiple-logs/87595/1 "2017-05-30T15:33:52Z")
Is there any way to break single line logs into multi line logs using filebeat?
---
### Author:  [@tudor](https://discuss.elastic.co/u/tudor)
#### Post date: [May 31, 2017, 8:23am UTC](https://discuss.elastic.co/t/single-line-log-into-multiple-logs/87595/2 "2017-05-31T08:23:33Z")
No, not with Filebeat, but should be possible with Logstash.
---
### Author:  [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)
#### Post date: [June 5, 2017, 6:26pm UTC](https://discuss.elastic.co/t/single-line-log-into-multiple-logs/87595/3 "2017-06-05T18:26:53Z")
```
2AUK20170407000006002840700014DeitzpiascECCSERVICE1 SAPMSSY1 3001ZRFC_ICICI&&ZRFC_ICICI itzpiascs 2AUK20170407000006002840700014DeitzpiascECCSERVICE1 SAPMSSY1 3001SYSU&&SYSTEM_RESET_RFC_SERVER itzpiascs 2AUK20170407000007002840700014DeitzpiascECCSERVICE1 SAPMSSY1 3001ZRFC_ICICI&&ZRFC_ICICI itzpiascs 2AUK2017040700000002840700014DeitzpiascECCSERVICE1 SAPMSSY1 3001SYSU&&SYSTEM_RESET_RFC_SERVER itzpiascs
```
This is a log sample, there are 4 logs each log start with 2AU,log file contains millions of logs.The question is how to break the logs and remove the extra white spaces and forward to elasticsearch using logstash?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 3, 2017, 6:26pm UTC](https://discuss.elastic.co/t/single-line-log-into-multiple-logs/87595/4 "2017-07-03T18:26:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.