blob: 8a6ae658d14a3277fffe486e337da542d3f2e6b2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
[MULTILINE_PARSER]
name multiline-regex-test
type regex
flush_timeout 1000
# Regex rules for multiline parsing
# ---------------------------------
#
# configuration hints:
#
# - first state always has the name: start_state
# - every field in the rule must be inside double quotes
#
# rules | state name | regex pattern | next state name
# --------|----------------|--------------------------------------------------
rule "start_state" "/(Dec \d+ \d+\:\d+\:\d+)(.*)/" "cont"
rule "cont" "/^\s+at.*/" "cont"
|
