Hi all, I’m using Graylog 4.1.6 and I’m using filebeat to send leg message into Graylog. My problem is how to configure fielbeat in order to send multiline messages. Consider a simple json text { "preview": false, "offset": 2491152, "result": { "_raw": "row message", "_time": "2022…

Hi, finally I solve it I just add the configuration from filebeat.inputs: filebeat.inputs: - type: log enabled: true paths: - C:/splunk-logs/aad-test/test.json # Multiline https://www.elastic.co/guide/en/beats/filebeat/current/multiline-examples.html multiline.type: pattern multiline…

FileBeat multiline How to

Graylog Central (peer support)

gsmith (GSmith) June 28, 2022, 11:47pm 3

Adding on to @tmacgbay , I also found another example. This post did look familiar.

Filebeat Windows - Java Multiline Pattern

Topic		Replies	Views
Filebeat multiline in Graylog 3 Graylog Central (peer support) sidecar , filebeat-windows , winlogbeat	5	1776	March 28, 2019
Multi-Line with Beats Input Graylog Central (peer support) sidecar , filebeat-linux	10	10352	July 24, 2017
Filebeat Multiline not combining lines Graylog Central (peer support) sidecar , filebeat-linux	9	1513	March 30, 2023
Sidecar Multiline config Graylog Central (peer support) sidecar	4	2907	July 26, 2019
Filebeat multiline option Graylog Central (peer support)	2	600	July 23, 2019

FileBeat multiline How to

Related topics