[Elastic Agent] Fix logging read from runnings process (elastic#18275)

* [Elastic Agent] Fix logging read from runnings process Since running process are using the debug level by default now, we have a log of messages going through the log. This commit add multiline support reading. * Update x-pack/elastic-agent/pkg/agent/operation/monitoring.go Co-authored-by: Michal Pristas <[email protected]>
urso · May 6, 2020 · 1d67ba4 · 1d67ba4
1 parent ca5995a
commit 1d67ba4
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/x-pack/elastic-agent/pkg/agent/operation/monitoring.go b/x-pack/elastic-agent/pkg/agent/operation/monitoring.go
@@ -168,7 +168,12 @@ func (o *Operator) getMonitoringFilebeatConfig(output interface{}) (map[string]i
 		"filebeat": map[string]interface{}{
 			"inputs": []interface{}{
 				map[string]interface{}{
-					"type":  "log",
+					"type": "log",
+					"multiline": map[string]interface{}{
+						"pattern": "^[0-9]{4}",
+						"negate":  true,
+						"match":   "after",
+					},
 					"paths": paths,
 					"index": "logs-agent-default",
 					"processors": []map[string]interface{}{