Assuming 3 events and lines being intermixed your log might look like this at worst:
The problem with this is: you can't even rely on order, as event_3 might surpass same lines from event_1 or event_2. In order to untangle these you need a correlation ID.
Your example suggest events are not intermixed, but written atomically. Like always:
If events are indeed written atomically, you can actually use multiline. Create a pattern looking for
^ID: (assuming ID is always the first entry) and use
match: after. See the table in the multiline docs.