Hi,
We have a need to add a second multiline block to our filebeat config. What isn't clear to me is the order in which multiline blocks are executed. Am I right to assume that they're executed in the order that the config file is written?
Thx
D
Hey @dawiro,
This is interesting, I have never used multiple multiline blocks for the same input. Could you share your multiline configuration?
I guess you are using the filestream input, right? In that case the parsers are executed from top to bottom. The log input doesn't support multiple multiline blocks.