Multi Line Logs to Single Line Logs - Conversion?

[DeepanshuSood1]

Hi,

I have some logs from an application which is having multiple modules associated with it, now all the components are creating multi line logs, so is there any way of converting the multi line logs to single line logs for creating an parser?

Pls suggest.

Regards,

Deepanshu Sood.  

[DaveGlover]

You would need to pass it through a pearl or python type preprocessor to get it to one line per event, then send it to the log decoder.

The log decoder can not merge multi-line logs on its own

[supravat]

Hi Dave, where do we need to perform this preprocessing? is it inside the log collector or do we need to deploy another preprocessor server between log collector and decoder?