Could you post a sample log file and an example of your desired grouping here? For posting the sample log file you might need to use something like https://pastebin.com/ if it's too large. Once I have these I can do some experimentation to try and come up with the right multiline settings.