Hi,
I am using auto_flush_interval in the multiline codec plugin. It works fine for all the events but when it reaches the end of file, it is throwing grokparsefailure error. And when I remove auto_flush_interval, there are no issues(but I will be losing the last event). Can someone please solve this issue?
It looks like when i specify the auto_flush_interval => 2, it captures the log line (for which grok patterns are written in .conf file) and converts them into the event within those 2 seconds interval, but if any new log lines come after the interval and for those log line we dont have specified grok pattern then this will be throwing error as grokparsefailure, how to handle this.