Hi,
On Thursday, 22 December 2016 11:33:06 UTC+1, mytempledarkstar wrote:
>
> Do You have andy advice that stop collect linst when appears finish of
> sql. I have to catch everything after timestamp and stop collecting after
> finish sql. After sql can appear anything.
>
If you have any access
Do You have andy advice that stop collect linst when appears finish of sql.
I have to catch everything after timestamp and stop collecting after finish
sql. After sql can appear anything.
W dniu czwartek, 22 grudnia 2016 09:50:08 UTC+1 użytkownik Jochen Schalanda
napisał:
>
> Hi,
>
> I'd recomme
Hi,
I'd recommend matching the timestamp as start of the log entry, e. g.
"2016-12-05 14:07:45,399" would be matched by "\d{4}-\d{2}-\d{2}
\d{2}:\d{2}:\d{2},\d{1,3}".
See
https://www.elastic.co/guide/en/beats/filebeat/current/multiline-examples.html
for some examples.
Cheers,
Jochen
On Thur
