Multiline not working as expected

Tags:

#1 Deleted user

I am trying to use multiline to ship a log file. Here is my config:

<Extension log>

Module	xm_multiline
HeaderLine /^\---Begin event transaction---/
EndLine /^\---Event Reporting Complete---/

</Extension>

<Extension json>

Module xm_json

</Extension>

<Input in>

Module im_file

	File   &quot;C:\\Users\\Administrator\\Desktop\\log.txt&quot;
	SavePos			FALSE
	ReadFromLast	FALSE
	Exec			to_json();

</Input>

<Output out>

Module		om_tcp
	
	Host		(server)
	Port		5010

</Output>

<Route>

Path	in =&gt; out

</Route>

I have blank entries in my database; 1 blank entry for each line that should be a part of the multiline (37 in one case).

Any help would be appreciated.

Thanks,

#2 Deleted user
#1 Deleted user

I am trying to use multiline to ship a log file. Here is my config:

<Extension log>

Module	xm_multiline
HeaderLine /^\---Begin event transaction---/
EndLine /^\---Event Reporting Complete---/

</Extension>

<Extension json>

Module xm_json

</Extension>

<Input in>

Module im_file

	File   &quot;C:\\Users\\Administrator\\Desktop\\log.txt&quot;
	SavePos			FALSE
	ReadFromLast	FALSE
	Exec			to_json();

</Input>

<Output out>

Module		om_tcp
	
	Host		(server)
	Port		5010

</Output>

<Route>

Path	in =&gt; out

</Route>

I have blank entries in my database; 1 blank entry for each line that should be a part of the multiline (37 in one case).

Any help would be appreciated.

Thanks,

Not sure if this helps, but the input file is a plain text file.