[Elastic Agent] Fix logging read from runnings process (elastic#18285)

Backport of elastic#18275
sayden · May 6, 2020 · 7f31e12 · 7f31e12
1 parent 1e01fe8
commit 7f31e12
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/x-pack/elastic-agent/pkg/agent/operation/monitoring.go b/x-pack/elastic-agent/pkg/agent/operation/monitoring.go
@@ -5,7 +5,7 @@
 package operation
 
 import (
-	"github.com/hashicorp/go-multierror"
+	multierror "github.com/hashicorp/go-multierror"
 
 	"github.com/elastic/beats/v7/x-pack/elastic-agent/pkg/agent/configrequest"
 	"github.com/elastic/beats/v7/x-pack/elastic-agent/pkg/agent/errors"
@@ -168,7 +168,12 @@ func (o *Operator) getMonitoringFilebeatConfig(output interface{}) (map[string]i
 		"filebeat": map[string]interface{}{
 			"inputs": []interface{}{
 				map[string]interface{}{
-					"type":  "log",
+					"type": "log",
+					"multiline": map[string]interface{}{
+						"pattern": "^[0-9]{4}",
+						"negate":  true,
+						"match":   "after",
+					},
 					"paths": paths,
 					"index": "logs-agent-default",
 					"processors": []map[string]interface{}{