Log file parsing and ingesting into ES

If you want to ingest the entire file as one event then use a pattern that does not match.

codec => multiline { pattern => "^Spalanzani" negate => true what => "previous" auto_flush_interval => 2 }

If you have a variety of xml objects in a file you could try

pattern => "^<?xml"
negate => true
what => previous