diff --git a/indexer.conf.erb b/indexer.conf.erb index 54c200e..12cedb7 100644 --- a/indexer.conf.erb +++ b/indexer.conf.erb @@ -27,7 +27,9 @@ filter { grok { type => "jenkins" tags => ["console.html"] - pattern => [ "^%{DATESTAMP:logdate} \| %{GREEDYDATA:logmessage}" ] + # Do multiline matching as the above mutliline filter may add newlines + # to the log messages. + pattern => [ "(?m)^%{DATESTAMP:logdate} \| %{GREEDYDATA:logmessage}" ] add_field => [ "received_at", "%{@timestamp}" ] } date {