I have a logfile on the form:
aaa
bbb
aaa
bbb
aaa
bbb
and a .conf file:
input {
file {
path => "..."
type => "j4"
start_position => "beginning"
codec => multiline {
pattern => "^[^\r]"
what => "previous"
# line not starting with \r belongs to the previous line.
}
}
}
filter {}
output {
stdout {
codec => rubydebug
}
}
I want messages on the form "\raaa\r\n bbb\r"and this works with the following setup if there was just one line shift, but with two line shifts I have trouble figuring out how to get messages on that format. Can someone help?