We're updating the issue view to help you get more done. 

Can not use filter multiline with elasticsearch output

Description

Start from version 1.4, the multiline filter will create an message array and timestamp array. instead of merge all the event message in a single message and timestamp.

The timestamp array will cause elasticsearch output plugin cannot output and occur error.

Error Log of Logstash:
NoMethodError: undefined method `tv_sec' for #<Array:0x78e64a7f>
sprintf at /home/john/logstash_indexer/1.4.0/lib/logstash/event.rb:223
gsub at org/jruby/RubyString.java:3041
sprintf at /home/john/logstash_indexer/1.4.0/lib/logstash/event.rb:209
receive at /home/john/logstash_indexer/1.4.0/lib/logstash/outputs/elasticsearch.rb:324
handle at /home/john/logstash_indexer/1.4.0/lib/logstash/outputs/base.rb:86
initialize at (eval):17
call at org/jruby/RubyProc.java:271
output at /home/john/logstash_indexer/1.4.0/lib/logstash/pipeline.rb:266
outputworker at /home/john/logstash_indexer/1.4.0/lib/logstash/pipeline.rb:225
start_outputs at /home/john/logstash_indexer/1.4.0/lib/logstash/pipeline.rb:152

Environment

None

Status

Assignee

Logstash Developers

Reporter

Ben Lim

Affects versions

1.4.0

Priority