You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: administration/configuring-fluent-bit/multiline-parsing.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -38,7 +38,7 @@ To understand which Multiline parser type is required for your use case you have
38
38
| parser | <p>Name of a pre-defined parser that must be applied to the incoming content before applying the regex rule. If no parser is defined, it's assumed that's a raw text and not a structured message. </p><p></p><p>Note: when a parser is applied to a raw text, then the regex is applied against a specific key of the structured message by using the <code>key_content</code> configuration property (see below).</p> ||
39
39
| key_content | For an incoming structured message, specify the key that contains the data that should be processed by the regular expression and possibly concatenated. ||
40
40
| flush_timeout | Timeout in milliseconds to flush a non-terminated multiline buffer. Default is set to 5 seconds. | 5s |
41
-
| rule | Configure a rule to match a multiline pattern. The rule has a specific format described above, multiple rules can be defined. ||
41
+
| rule | Configure a rule to match a multiline pattern. The rule has a specific format described below. Multiple rules can be defined. ||
In the example above, we have defined two rules, each one has its own state name, regex paterns, and the next state name. Every field that composes a rule **must****be **inside double quotes.
71
+
In the example above, we have defined two rules, each one has its own state name, regex paterns, and the next state name. Every field that composes a rule **must be**inside double quotes.
72
72
73
-
The first rule of state name **must **always be **start_state**, and the regex pattern **must** match the first line of a multiline message, also a next state must be set to specify how the possible continuation lines would look like.
73
+
The first rule of state name **must always** be **start_state**, and the regex pattern **must** match the first line of a multiline message, also a next state must be set to specify how the possible continuation lines would look like.
74
74
75
75
{% hint style="info" %}
76
76
To simplify the configuration of regular expressions, you can use the Rubular web site. We have posted an example by using the regex described above plus a log line that matches the pattern:\
0 commit comments