Docs warns about using the multiline codec in beats inputs etc. because of mixing up data. As tcp input already uses line codec and the events processing seems to be related/separated to each network socket it should be safe to use multiline instead of line (assuming the syslog sender does not mix the lines by itself), am I right?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.