Skip to content

first_line_regex is ignored? #3931

@bscaleb

Description

@bscaleb

I'm using the helm chart v3.8.0 (which I acknowledge is out of date - if you think that is the issue please let me know).

I set sumologic.logs.multiline.enabled to true and then set a value for sumologic.logs.multiline.first_line_regex. This value gets placed into a configmap which is read by the log collector pods. I know they're looking at it, because when I had a bad regex, they threw errors.

However, in the sumo UI when I look at my log source in the Collection page, I see "Multiline Processing" is enabled, but "Infer Message Boundaries" is set to "Detect Automatically" and not "Add Boundary Regex". Shouldn't the first_line_regex field in the helm chart map to that multiline boundary regex?

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions