From f3f6fdaf90f9ec6dff96c5c2f10d5ef27ac0d454 Mon Sep 17 00:00:00 2001
From: ycz008 <yangchengzi@seethingx.com>
Date: Tue, 5 Mar 2024 16:30:00 +0800
Subject: [PATCH] logstash message \n\t " "

---
 dev-upgrade/elastic/logstash-alert.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/dev-upgrade/elastic/logstash-alert.yaml b/dev-upgrade/elastic/logstash-alert.yaml
index 4be9e7c..9fca956 100644
--- a/dev-upgrade/elastic/logstash-alert.yaml
+++ b/dev-upgrade/elastic/logstash-alert.yaml
@@ -57,6 +57,11 @@ data:
       mutate {
         join => { "[log][file][path]" => "/" }
       }
+      mutate {
+          gsub => [
+            "message", "\n\t", " "
+          ]
+      } 
       if [stack_trace] {
        mutate {
           gsub => [