Filebeat multiline kubernetes container logs not working
i think you still need to put the line together ,could you try this?use the { because the log start with { not your timestamp format.
filebeat.prospectors:- paths: - input.json multiline.pattern: '^{' multiline.negate: true multiline.match: afterprocessors:- decode_json_fields: fields: ['message'] target: jsonoutput.console.pretty: true