Merge consecutive log lines with same timestamp #9581
Unanswered
mbhegde-orcl
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I have a
tail
log source.there can be multiple lines with same timestamp, I want them to appear as same log for my use case.
As I understand, multiline parser needs a regex to find the start line and continuation lines of the log. But how can I say
"merge line B with preceding line A if it has same timestamp, else start a new log record"
?Eg: First 2 lines should end up as same log record and the 3rd line in separate log.
is it possible using filters or some other settings? Apologies if I missed something obvious
Thanks
Beta Was this translation helpful? Give feedback.
All reactions