search

ComodoSecurity / openedr

Open EDR public repository
Other
2.3k stars 452 forks source link

log ingesting with filebeat impossible in current release #22

Open hyperbaba opened 3 years ago

hyperbaba commented 3 years ago

Hi there, the parsing of pretty json log messages is not possible even with the multiline json option in filebeat. The problem is that there is no newline after closing curly bracket and beginning of the new document. }{

i read in the issues that this has been fixed. Can you run another build with fixed stuff and put it into release?

Thanks in advance