[ossec-list] Read more than 1 log line

[xen]

I am trying to write a decoder rule to read in a log file that has
Carriage returns.  So in essence, have Ossec grep the next 3 lines,
like Grep.  Is this possible?  I have tried the extra_data option but
I can't get it to work.

  Xen