How to use the multiline in for these logs

Multiline is the wrong tool for this. The aggregate filter should be a better match.