I'm working on trying to get our application server's log4j working so that events will show up in searches for multiline events as a single event. There is also a problem where there are "..." breaks where the multiple lines should just continue on.
I assume that this is a problem within my log4j/syslog configuration on the sending server that is causing this?
The other thing, which I'm not sure that it's an issue is, say I search on "18.104.22.168" , only the line that has this will show up in the search, not the full set of lines that I'm expecting. I would have click on this entry and then do a "Show Source" to see the full lines.
Any ideas would be great. I have this in my config: