I am having issues building graph based on multiline fields.
I am trying to build a graph of java exceptions thrown by our application, I save those exceptions in a field called shortmessage which are seen on search but not as shortmessage.raw when I am trying to build a graph.
Here are some screenshots:
As you may see I can find multiple error messages in my log based on severity field, below the main search you can find an example of multiline value. But when I then try to draw a graph based on this search it only displays non-multiline fields (if I am not wrong it also shows two-lined errors but not larger ones).
Is something wrong here or this is an expected behavior?