Codec multiline

[uma_rengasamy]

Can we add below codec => multiline in filter section ?

if [sourcetype =~ /error/]
{
codec => multiline {
pattern => "(^%{TOMCAT_DATESTAMP})|(^%{CATALINA_DATESTAMP})"
negate => true
what => "previous"
}
}

[Badger]

@uma_rengasamy

Can we add below codec => multiline in filter section ?

No. codecs are used in inputs and outputs, not filters.

[uma_rengasamy]

Thank you. But it throws configuration error in output section too.

[uma_rengasamy]

Configuration looks good after adding codec inside amazon_es, But it didnt merge the lines . Does codec -> multiline is supported for amazon_es plugin ?
amazon_es {
codec => multiline {
pattern => "^%{TIMESTAMP_ISO8601}"
negate => true
what => "previous"
auto_flush_interval => 5
}
hosts =>....
}