Why are messages cut line by line in Kibana?

Question

linux

There are several microservices.
Everyone writes logs to ELK through the logging mechanism built into docker, configured in docker-compose like this:

logging:
      driver: "syslog"
      options:
        syslog-address: "upd://192.168...."
        tag: "$HOSTNAME {{.ImageName}} {{.Name}} "

But in kibana, each message is divided into lines (that is, in each kibana message, the message field is only up to the end of the line, the rest of the lines have to be searched for by different filters).

Where did I do something wrong? :)

Answer 1

Kibana does not cut or break anything at all.
How you put strings in elastic is how they are stored there.
It is necessary to parse them with something along the way, combine multiline messages and send them to the elastic as a single message. This is what logstesh does, for example. Or you need to see what your built-in logging mechanism can do, maybe there are settings for multistring

Answer 2

Make an additional appender that writes in json format and set up kibana for these files. And then the multiline problem will be solved.