Kubernetes Integration Policy Parser Configuration

Elastic Stack Elastic Agent
1

Hello All,

Regarding the Parser configuration of integration policy, if I have too many multiline pattern for each name.
Let say, I have this below for each log

| Agent Policy | Multiline Pattern                | Target Namespace |
| ------------ | -------------------------------- | ---------------- |
| `dev-logs`   | `^\[`                            | `dev`            |
| `tools-logs` | `^[0-9]{4}-[0-9]{2}-[0-9]{2}`    | `tools`          |
| `kong-logs`  | `^(?:[0-9]{1,3}\.){3}[0-9]{1,3}` | `kong`           |

How do I add multiple condition for those multiline?
If example parser configuration is

# - ndjson: # target: json 
 # ignore_decoding_error: true
 # - multiline: # type: pattern
 # pattern: '^\['
 # negate: true # match: after

BR

2

Hi All,

Additionally, I already applied the Elastic Agent using Kubernetes Integration policy collect the logs as a Filebeat and send to Logstash. But, hop to send the Logstash, I got a issue about the SSL.
Hence, how do I by pass SSL configure in the Fleet output setting?

BR,