Skip to content

Commit 688732f

Browse files
author
Martin Fleurke
committed
Clarify parsing multiline messages (#10212)
make more clear the distinction between docker/cri splitting and merging, and multiline application log (stacktraces) merging Signed-off-by: Martin Fleurke <[email protected]>
1 parent de5fefd commit 688732f

File tree

2 files changed

+8
-8
lines changed

2 files changed

+8
-8
lines changed

administration/configuring-fluent-bit/multiline-parsing.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,13 @@ The Multiline parser engine exposes two ways to configure and use the feature:
1919
Fluent Bit exposes certain pre-configured parsers (built-in) to solve specific
2020
multiline parser cases. For example:
2121

22-
| Parser | Description |
23-
|----------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
24-
| `docker` | Process a log entry generated by a Docker container engine. This This parser supports the concatenation of large log entries split by Docker. If you use this parser, and you also want to concatenate loglines like stacktraces, you can add the [multiline filter](../../pipeline/filters/multiline-stacktrace.md) to specify additional parsers |
25-
| `cri` | Process a log entry generated by CRI-O container engine. Like the `docker` parser, it supports concatenation of log entries |
26-
| `go` | Process log entries generated by a Go based language application and perform concatenation if multiline messages are detected. |
27-
| `python` | Process log entries generated by a Python based language application and perform concatenation if multiline messages are detected. |
28-
| `java` | Process log entries generated by a Google Cloud Java language application and perform concatenation if multiline messages are detected. |
22+
| Parser | Description |
23+
| ------ | ----------- |
24+
| `docker` | Process a log entry generated by a Docker container engine. This parser supports the concatenation of large log entries split by Docker. If you use this parser, and you also want to concatenate loglines like stacktraces, you can add the [multiline filter](../../pipeline/filters/multiline-stacktrace.md) to specify additional parsers. |
25+
| `cri` | Process a log entry generated by CRI-O container engine. Like the `docker` parser, it supports concatenation of log entries. |
26+
| `go` | Process log entries generated by a Go based language application and perform concatenation if multiline messages are detected. |
27+
| `python` | Process log entries generated by a Python based language application and perform concatenation if multiline messages are detected. |
28+
| `java` | Process log entries generated by a Google Cloud Java language application and perform concatenation if multiline messages are detected. |
2929

3030
### Configurable multiline parsers
3131

pipeline/filters/multiline-stacktrace.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ Along with multiline filters, you can enable one of the following built-in Fluen
1717
When using this filter:
1818

1919
- The usage of this filter depends on a previous configuration of a [multiline parser](../../administration/configuring-fluent-bit/multiline-parsing.md) definition.
20-
- To concatenate messages read from a log file, it's highly recommended to use the multiline support in the [Tail plugin](https://docs.fluentbit.io/manual/pipeline/inputs/tail#multiline-support) itself. This is because performing concatenation while reading the log file is more performant. Concatenating messages that were originally one line, but split by Docker or CRI container engines because of their size, is supported in the [Tail plugin](https://docs.fluentbit.io/manual/pipeline/inputs/tail#multiline-support) icw the `docker` or `cri` parser. to concatenate application logs like stacktraces on top of that, you can use this multiline filter.
20+
- To concatenate messages read from a log file, it's highly recommended to use the multiline support in the [Tail plugin](https://docs.fluentbit.io/manual/pipeline/inputs/tail#multiline-support) itself. This is because performing concatenation while reading the log file is more performant. Concatenating messages that were originally one line, but split by Docker or CRI container engines because of their size, is supported in the [Tail plugin](https://docs.fluentbit.io/manual/pipeline/inputs/tail#multiline-support) in combination with the `docker` or `cri` parser. To concatenate application logs like stacktraces on top of that, you can use this multiline filter.
2121

2222
{% hint style="warning" %}
2323

0 commit comments

Comments
 (0)