Hi,
Conversion should happen as early as possible, so the multiline extension
instance would be the place.
Unfortunately both the xm_multiline and the default linebased parser are
expecting single by CR or CRLF.
Another ugly temporary solution could be to define the HeaderLine as a
hex bytestrin
MSSQL error logs are encoded in UCS-2LE and some events are multi-line. I
attempted the following:
Modulexm_multiline
HeaderLine/^\d\d\d\d-\d\d-\d\d/
Moduleim_file
File "C:\Path\To\MSSQL\ERROLOG"
InputType mssql_multiline
