Is it possible input multipline codec in kafka like below?
input {
kafka {
bootstrap_servers => "10.10.10.10:9093"
client_id => "logs1-1"
group_id => "logs1-1"
auto_offset_reset => "latest"
topics_pattern => "sit.*"
codec => json { charset => "UTF-8" }
decorate_events => true
security_protocol => "SSL"
ssl_keystore_location => "/data/ssl/server.keystore.jks"
ssl_keystore_password => "XXXX"
ssl_keystore_type => "JKS"
ssl_truststore_location => "/data/ssl/server.truststore.jks"
ssl_truststore_password => "XXXX"
ssl_truststore_type => "JKS"
ssl_key_password => "XXXX"
ssl_endpoint_identification_algorithm => ""
codec => multiline {
pattern => "^%{TIMESTAMP_ISO8601}"
negate=> true
what => "previous"
}
}