https://community.splunk.com/t5/Getting-Data-In/How-to-handle-multiline-Kubernetes-logs/m-p/448852#M78016 <P>Converted from an answer to an old question into a new question.</P> Mon, 18 Mar 2019 23:13:43 GMT richgalloway 2019-03-18T23:13:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-handle-multiline-Kubernetes-logs/m-p/448851#M78015 <P>Hi, I'm trying to make multiline work<BR /> I posted an issue here [<A href="https://github.com/splunk/splunk-connect-for-kubernetes/issues/111%5D%5Bhttps://github.com/splunk/splunk-connect-for-kubernetes/issues/111">https://github.com/splunk/splunk-connect-for-kubernetes/issues/111][https://github.com/splunk/splunk-connect-for-kubernetes/issues/111</A>]</P> <P>Basically it seems to work (multiline are single event in Splunk) but I'm getting a lot of errors in Splunk pod logs. I believe one per 5 second per log file</P> <P>"deadlock; recursive locking" ,Hi mmodestino,</P> <P>I'm trying to make the multiline work. I posted an issue on Github <A href="https://github.com/splunk/splunk-connect-for-kubernetes/issues/111">https://github.com/splunk/splunk-connect-for-kubernetes/issues/111</A> <BR /> It kind of works but I'm getting "deadlock; recursive locking" errors in the Splunk pod logs. A lot of them. I think every 5 seconds for every log file, for every splunk pod</P> <P>Why is it going into a loop?</P> Mon, 18 Mar 2019 22:39:44 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-handle-multiline-Kubernetes-logs/m-p/448851#M78015 vincebair 2019-03-18T22:39:44Z https://community.splunk.com/t5/Getting-Data-In/How-to-handle-multiline-Kubernetes-logs/m-p/448852#M78016 <P>Converted from an answer to an old question into a new question.</P> Mon, 18 Mar 2019 23:13:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-handle-multiline-Kubernetes-logs/m-p/448852#M78016 richgalloway 2019-03-18T23:13:43Z