i have a very basic question.
i have to use nxlog as a logshipper on the (solaris) client side to logstash (elk).
Within this configuration there are some bigger logfiles with multilines to parse (java traces / xml ...).
Should i handle the multiline on the nxlog side or on the logstash receiver side?
thanks in advance