codec => multiline {
pattern => "(^UL ingress)|(^DL ingress)|(^numOfActiveUe)|(^pdcpCurrentTime_g)"
what => "previous"
max_lines => 6
}
Still we are getting individual events instead of clubbing of events matching the regex to one event