Hi, Are you sure this is not due to the json_lines vs json logstash codec? This issue pops up quite frequently with the same symptoms and people are blaming nxlog whereas this is a logstash configuration issue. There are some configs floating around on the internet where the json logstash codec is used (incorrectly).
Regards, Botond On Wed, 9 Jul 2014 14:37:19 -0400 Chris <didji...@cfl.rr.com> wrote: > I have the following multiline's set up and the majority of the time they > work just fine, but every now and then they fail and I get several messages > in one logstash message. Is there something specific I should change? > > Thank you, Chris > > _________________________ > > <Extension multiline> > Module xm_multiline > HeaderLine "<EcomLogEntry>" > > </Extension> > > <Extension dicom-multi> > Module xm_multiline > HeaderLine /^\d\d/\d\d/\d\d\d\d\s\d\d:\d\d:\d\d\,\d\d\d/ > </Extension> > <Extension dicom-multiEZ> > Module xm_multiline > HeaderLine /^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\d-0400/ > </Extension> ------------------------------------------------------------------------------ Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft _______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
