I'm trying to use the
xm_multiline module with nxlog to forward content of a logfile to logstash The log contains different xml elements which are properly indented (opening and closing elements are located at the start of the line) . E.g.
But somehow nxlog gets confused with the / in the regex pattern. I also tried escaping which dindn't help. More testing showed that it needs at least one letter. I tried to specify all letters via regex but that didn't work:
Only way that seems to work is to specify all letters in the square braket (with the exception of the lettern, which breaks).
I think this is a bug in the module. Can you confirm so I can open a ticket? Thanks
Fyi, this is a duplicate of http://stackoverflow.com/questions/27429234/which-headerline-and-endline-for-multiline-xml-with-different-elements
The following error message is correct:
ERROR HeaderLine and Endline both match
You should fix your configuration so that the regular expressions in HeaderLine and Endline do not match the same line in the input. This is incorrect:
It should be:
It's unclear what your issue with the character n is about.