example-multiline.conf

{
	"network": {
		"servers": [ "localhost:5043" ],
		"ssl ca": "./logstash.cer"
	},
	"files": [
		{
			"paths": [ "/var/log/httpd/error.log" ],
			"fields": { "type": "errors" },
			"codec": {
				"name": "multiline",
				"pattern": "^[0-9]{4}/[0-9]{2}/[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2} ",
				"negate": true,
				"what": "previous"
			}
		}
	]
}