Multiplied lines in table panel

[thmoeller]

Hi,

i am using kibana 3 embedded with logstash. currently i was experiencing the following:

I have a logfile which contains multiline error reports (including stacktraces). I am new to logstash, but managed to use multiline filter correctly after a while. But now i am stuck.

According to my console debug output logstash is merging multiline events correctly into one event.

Looking at the same event in Kibana, it is still one event, but some specific lines get multiplied (up to 33 times)!!

This simple line from the debug:

ERROR REPORT: \n<ns0:Error xmlns:ns0=\"http://www.testdomain.com/schemas/standard/logdefinition\">\n    <ns1:Message xmlns:ns1=\"http://www.testdomain.com/schemas/Standard/ApplicationError\"/>\n

In Kibana it becomes:

ERROR REPORT: 
<ns0:Error xmlns:ns0="http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">" 
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">"
 target="_blank">http://www.testdomain.com/schemas/standard/logdefinition">;
    <ns1:Message xmlns:ns1="http://www.testdomain.com/schemas/Standard/ApplicationError"/>" target="_blank">http://www.testdomain.com/schemas/Standard/ApplicationError"/>"``` 
Seems that it has something to do with the backslash or the URL.

Regards

Thorsten

[rashidkpc]

I've been unable to replicate this. Does it still occur in master?

[thmoeller]

Tested with the latest version shipped with logstash 1.3.2.

Problem seems to be solved. Multiple lines are not present any more as with with logstash 1.2

Issue can be closed.