Unable to send logs to logstash

[shrikantgulia (Shrikant)]

filebeat.prospectors:

• input_type: log
  paths:
  • /home/niked/Downloads/tom.log
    document_type: prepaid_logs
    multiline:
    pattern => "^%{TIMESTAMP_ISO8601} "
    negate => true
    what => previous
    output.logstash:
    hosts: ["localhost:5044"]

This is my filebeat config but i am unable to send logs to filebeat.
Help would be really appreciated

[Christian_Dahlqvist]

Please format the config correctly using the tools in the editor. Yaml is sensitive to indentation so it is hard to tell what is right and wrong when config is not correctly formatted.

[shrikantgulia (Shrikant)]

@Christian_Dahlqvist thankyou for the reply
Please have a look at the screenshot

[steffens (Steffen Siering)]

Use the </>-button to format configs. Please, no screenshots (I can barely read the text in the screenshot).

You can not use %{...} in filebeat multiline. You will have to configure a regular expression to match the format you're actually expecting.