Why Filebeat is treating the the whole content of the file as a single message?

I am trying to send some custome logs to elasticsearch but it seems filebeat is treating the content of the file as a single message while the file has many log entries. The file name syntax is as follows:


The filebeat conf is as follows, Please tell what I am doing wrong here?

- type: log
  enabled: true
     - F:\inetpub\logs\443\*.txt.*
  #include_lines: ['^ERR', '^WARN']
  multiline.pattern: '^\2020-'
  multiline.negate: true
  multiline.match: after

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.