diff --git a/pipeline/filters/multiline-stacktrace.md b/pipeline/filters/multiline-stacktrace.md index f6f80e446..1db4a242d 100644 --- a/pipeline/filters/multiline-stacktrace.md +++ b/pipeline/filters/multiline-stacktrace.md @@ -110,7 +110,7 @@ This second file defines a multiline parser for the example. Note that a second # # rules | state name | regex pattern | next state # ------|---------------|-------------------------------------------- - rule "start_state" "/(Dec \d+ \d+\:\d+\:\d+)(.*)/" "cont" + rule "start_state" "/([A-Za-z]+ \d+ \d+\:\d+\:\d+)(.*)/" "cont" rule "cont" "/^\s+at.*/" "cont" ``` diff --git a/pipeline/inputs/tail.md b/pipeline/inputs/tail.md index eb84b8267..fec3c2b47 100644 --- a/pipeline/inputs/tail.md +++ b/pipeline/inputs/tail.md @@ -178,7 +178,7 @@ In the case above we can use the following parser, that extracts the Time as `ti [PARSER] Name multiline Format regex - Regex /(?