Oniguruma Regx Parsing multiline logs

I am trying to parse multi-line logs in oniguruma regx and I understand logstash has a mutline filter but which way is better? To parse the logs with regx before logstash(or at?) or use the multi-line filter in the configuration file?

To parse the logs with regx before logstash(or at?)

Please explain what you mean by this.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.