sending multiline logs to logstash | Log collection solutions

#1 awahlert 5 years ago

Hi,

i have a very basic question.

i have to use nxlog as a logshipper on the (solaris) client side to logstash (elk).

Within this configuration there are some bigger logfiles with multilines to parse (java traces / xml ...).

Should i handle the multiline on the nxlog side or on the logstash receiver side?

thanks in advance

Andreas

Permalink

#2 b0ti Nxlog ✓ 5 years ago

#1 awahlert

Hi, i have a very basic question. i have to use nxlog as a logshipper on the (solaris) client side to logstash (elk). Within this configuration there are some bigger logfiles with multilines to parse (java traces / xml ...). Should i handle the multiline on the nxlog side or on the logstash receiver side? thanks in advance Andreas

It should be fairly easy to do that on the agent side, see the Parsing Multi-Line Messages section in the user guide.