Group log entries by a start line and end line containing a certain string

[mikefisher]

I have somewhat of an unwieldy log file I'm trying to wrangle. Each log entry is contained between two lines like so:

<TIMESTAMP> BEGIN LOG DECODE

log data

log data

log data

<TIMESTAMP> END LOG DECODE

What's the best way to grab everything in between and start to extract fields and such?

[ITWhisperer]

Have these events already been ingested? Can you share some anonymised _raw events in a code block </>