Filebeat 5.0 with multiline, split event data to two events

but timeout will not protect you from weird buffering effects, as file pointer is already advanced once this happens.