Parsing multiline logs : line + xml

Your grok expression doesn't match the input: "http-nio-8080-exec-8" isn't an IP address so you can't use the IP grok pattern, and while "AbstractServer.java" should pass as a Java class name you're ignoring the line number that follows.

See also Logstash multiline Bug regarding grokking multiline strings.