When I use OR condition in multiline.pattern each line comes in a separate message:
When I use the following lines, I can successfully parse multiple line logs starting with [INFO], [ERROR] or [DEBUG]:
multiline.pattern: '^['
multiline.negate: true
multiline.match: after
When I use the following lines, I can successfully parse multiple line starting with Exception:
multiline.pattern: '^Exception\b'
multiline.negate: true
multiline.match: after
When I merge the two expressions with |, as follows, I mistakenly get each log line sent as a separate message:
multiline.pattern: '^[\|^Exception\b'
multiline.negate: true
multiline.match: after
In the last pattern, I tried multiline.negate: true and multiline.negate: false and I had the issue with both options.