regex - Does using multiline in logstash filter print out the data? -

regex - Does using multiline in logstash filter print out the data? -

i trying utilize multiline combine number of of lines in logfile same starting symbol. in case starting symbol #s#. this:

#s# dsifj sdfojosf sfjosdfoisdjf #s# dsfj sdojifoig dfpkgokdfgk 89s7fsjlk sdf #s# lsdffm dg;;dfgl djfg 930`e`fsd ... ... ...

note: random character utilize imitate content of actual log.

the next wrote multiline startment:

multiline { type => "table_init" pattern => "#s#" negate => true => "next" }

i assuming wrote combine them 1 line, wondering if prints out line or need utilize gork parse whole entire line before prints. thoughts , inputs helpful. give thanks you.

if trying match lines match "#s#", should have negate set false. utilize negate when want lines not match pattern.

as actual question, multiline takes relevant lines , puts them "message" field, including newline characters (\n, , assume \r if running windows though have never checked). can grok entire message info want.

so if set output so:

output { stdout { codec => rubydebug } }

you should find outputted message read like:

"message" = "#s# dsifj sdfojosf sfjosdfoisdjf \n#s# dsfj sdojifoig dfpkgokdfgk 89s7fsjlk sdf\n#s# lsdffm dg;;dfgl djfg 930`e`fsd

if set multiline filter correctly.

hope helps!

regex logging logstash