Hello all;
After at lot of work on this I have Filebeat 7.15.0 configured with 12 different, pretty complex input filestreams. Most of the inputs are also configured with a multiline parser.
The 12 logs in this application are not configured in a similar manner. This adds of course complexity to the inputs. It was also awkward to collect test input from the many logs to cover all the different outcomes.
To sum up: the second workaround from @Emde made my day(s). Besides that I had very good help from these 3 tools:
Great tools, which saved me a lot of tedious testing time. It would be nice, if the Go Playground supports all Filebeat multiline configuration settings. I hope the maintainer reads this!
Best regards
Flemming