So, avoiding a bit of a long explanation on why I'm doing it this way... But essentially, I am trying to put multi-line messages into kafka and then parse them in logstash.
What I think I am seeing in kafka (using console-consumer) is this: "line 1 \nline 2 \nline 3\n" Then when I get it into logstash I am seeing it as: { "message" => "line 1 \\nline 2 \\nline \n", "@version" => "1", "@timestamp" => "2015-02-09T13:55:36.566Z", } My question is, is this what I should expect? I think I can probably figure out take the single line and break it apart in logstash. But do I need to? Any thoughts?