I am using the Logstash Syslog input plugin to receive events from a single source. I've noticed that sometimes the message actually includes multiple log entries. I've seen up to 5 events in the message field of a single event in ElasticSearch with this setup. Does anyone have any tips to dealing with this type of issue? I'm considering trying out the TCP input next.