Multi-line processing is used to ensure a log message that is made up of multiple lines, separated by a line break or carriage return, are properly grouped as a single message when ingested into Sumo Logic.
Multi-line processing is NOT a way to break a single line messages into multiple parts within Sumo Logic. If a customer is logging multiple messages into a single line, and there are no line breaks or carriage returns between the message, and/or if the messages come as part of a larger individual message (ex within a JSON array, XML etc...) Sumo Logic will in most cases not be able to break these into individual messages.
Comments
0 comments
Please sign in to leave a comment.