input forward multiline configuration possible?

[pagalba-com]

Hello,

I get logs to fluentbit via fluentd protocol and put them to elastic index.
Some containers are java spingboot based, and have tag like app.dev.backend.api.

My settings are:

[INPUT]
Name forward
Listen 0.0.0.0
Port 24224

[FILTER]
Name multiline
Match app..backend
buffer on
multiline.key_content log
multiline.parser go, java, python

[OUTPUT]
Name opensearch
Match app.*
Host searchservernode.lan
Port 9200
Tls on
tls.verify off
Index app_dev
Type docker
HTTP_User fluent

but these produce log per line.

[pagalba-com]

anyone?