Skip to content

Instantly share code, notes, and snippets.

@saleeema
saleeema / configuration
Created February 19, 2015 17:17
Logstash grok multiline; Java stack trace
input {
file {
path => "/root/mult.log"
start_position => "beginning"
sincedb_path => "/dev/null"
codec => multiline{
pattern => "^ -%{SPACE}%{TIMESTAMP_ISO8601}"
negate => true