2

I use Filebeat6x to ship my logs to logstash. Some of my logs may be a multiline thats why I use Filebeat to Manage multiline messages

Now I want to add filter in logstash to do something like

if the message is multiline then add tag.

If the parsing of those multilines was from logstash I will use multliline_tag.

But how can I tag those multilines when the parsing is done in filebeat?

baudsp
  • 4,076
  • 1
  • 17
  • 35
airdata
  • 577
  • 1
  • 7
  • 23

0 Answers0