Hi,
We have a need to add a second multiline block to our filebeat config. What isn't clear to me is the order in which multiline blocks are executed. Am I right to assume that they're executed in the order that the config file is written?
Thx
D
Hey @dawiro,
This is interesting, I have never used multiple multiline blocks for the same input. Could you share your multiline configuration?
I guess you are using the filestream input, right? In that case the parsers are executed from top to bottom. The log input doesn't support multiple multiline blocks.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.