I have been trying to use the multiline codec with a TCP input. So far with no luck.
Reading through other posts it seems to be that the multiline codec with a TCP input isn't really ideal.
I would use file beats, however the server the logs are written to is AIX and GO isnt a go...
The log being shipped is java application multiline format, this isnt something i can change.
Has anyone had success with collating multiline events on a TCP input?