Hi. I'm trying to ingest some new type of message. The message header is very similar to the syslog format, but the message itself is an xml format. Each line in the message ends with 0x0a (LF). These packets are ingested into elastic line by line. So each message (one tcp packet with data) is separated into several documents which makes no sense.
Of course, the ideal output for me will be parsed xml.
Is there a way to get rid of this framing?