It's seems impossible, but just in case want to ask, is there some way to apply multiline code plugin in the second pipe, that receive logs from first pipe.
first pipe pipe_01.conf output: pipeline { send_to => "pipe_2" codec => plain }
second pipe pipe_02.conf input: pipeline { address => "pipe_2" }
can we apply multiline code plugin in the second pipe?
Thank you.
I want to apply multiline codec to postfix documents. Main problem is that this postfix id that I use in pattern part of the multiline, could be in the different parts of document - sometimes it's in the beginning, sometimes in the end, or between names of directories and so on, so I can't just use something like ^%{POSTFIX_ID} or $%{POSTFIX_ID}. I tried to use just pattern %{POSTFIX_ID} without setting place, but sometimes it triggers on the wrong values, therefore it need some anchor, so it triggers only when it's postfix id, and not something else, but anchor doesn't work too (since we can't set something like (%{POSTFIX_ID}:|%{POSTFIX_ID}.) , tried, wrong result).
So I thought to sent documents to one pipe, get postfix id in first pipe, then set postfix id in the right place of the message and send it to the second pipe, in the second pipe logs will be processed with multiline codec plugin.
(of course between documents with postfix id, there are documents without it, that's why I use multiline.)
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.