Hi there,
i am working to parse a log file that contains message with one line and multiline like below :
Exception in thread "main" java.lang.NullPointerException
at com.example.myproject.Book.getTitle(Book.java:16)
at com.example.myproject.Author.getBookTitles(Author.java:25)
at com.example.myproject.Bootstrap.main(Bootstrap.java:14).
so i use multiline plugin but doesn't work.i get this error:
Cannot create pipeline {:reason=>"non reloadable pipeline"}
Unable to reload configuration because it does not support dynamic reloading {:pipeline_id=>"main", :plugins=>[LogStash::Inputs::Stdin]}
this is my pipeline.conf:
input {
file {
path => "c:/logstash.log"
start_position => "beginning"
}
stdin {
codec => multiline {
pattern => "^\s"
what => "previous"
}
}
}
filter {
grok{
match => { "message" => "%{TIME:timestamp} %{LOGLEVEL:LEVEL} %{GREEDYDATA:errormsg}" }
}
}
output {
if "ERROR" in [LEVEL]
{
elasticsearch {
hosts=>"localhost:9200"
}
}
stdout { codec => rubydebug }
}
Highly appreciate your help.