Introduction to Observability,Topics: lesson-4-multi-line-processing , is the last row correct?

Elastic Community and Ecosystem Elastic Training
1

mutliline_in_file_beats2
mutliline_in_file_beats21047×570 199 KB

Could you please validate, the last row(selected in red reactangle) is correct? Correct option for the explanation should be Negate: True(instead of false) and Match: Before

2

Hello,

The last row is not correct, it should be negate: True and match: before as you mentioned.

Thanks for spotting this issue, we are going to fix this soon.