If you JSON is pretty-printed like that then you can make your pattern look for the non-indented } that ends the object
codec => multiline { pattern => "^}" negate => true what => next auto_flush_interval => 1 }
If you JSON is pretty-printed like that then you can make your pattern look for the non-indented } that ends the object
codec => multiline { pattern => "^}" negate => true what => next auto_flush_interval => 1 }
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.