sending multiline logs to logstash

View thread

awahlert

Hi,

i have a very basic question.

i have to use nxlog as a logshipper on the (solaris) client side to logstash (elk).

Within this configuration there are some bigger logfiles with multilines to parse (java traces / xml ...).

Should i handle the multiline on the nxlog side or on the logstash receiver side?

thanks in advance

Andreas