有人可以帮助我为下面登录filebeat.yml文件的行定义多行模式吗?
<entry>
<severity>FATAL</severity>
<timestamp>2018-09-18 08:52:23:461 EDT</timestamp>
<component>framework</component>
<class>com.mt.xml.CustomerConfigUtil</class>
<method>loadGlobalProperties</method>
<arguments></arguments>
<message>Global Properties re loaded successfully</message>
<exception></exception>
</entry>
<entry>
<severity>FATAL</severity>
<timestamp>2018-09-18 08:52:23:486 EDT</timestamp>
<component>framework</component>
<class>com.mt.xml.CustomerConfigUtil</class>
<method>loadCustomerProperties</method>
<arguments></arguments>
<message>Customer Properties re loaded successfully</message>
<exception></exception>
</entry>
当我尝试匹配起始行
多行: 模式:“ ^” 否定:错误 匹配:之后
每行仍然作为单独的日志。您能否提供正确的语法?谢谢!