Thanks for the reply
yes, i understand, but i keeping pushing the timeout and if there is no new event, the last even will be hidden for a unknown time
i would suggest adding a optional preference for line_reader_timeout (disable by default), so after that time the line reader would push to the multiline the partial line it would already have. This would not be used for most people, but would allow one to fix this kind of problems on logs with small number of events
Another alternative would be adding a option flush_on_text, where when some defined text/regexp would force the line reader to flush even lines without newline. Or even replace the newline with other text as line ending flag, again with a new option line_ending
this seems like the only way to fix this, give the admin some control to line reader, either by timeout or by matching characters or newline replacement.
fixing the log format would be better, but not everyone can do it