From ed4ad075b815e7a40f1c8e527b2bf15ea7624080 Mon Sep 17 00:00:00 2001
From: RicardoAAD <ricardo@calyptia.com>
Date: Fri, 20 Oct 2023 18:01:09 -0300
Subject: [PATCH] This PR improves the regex example in the tail input plugin
 and in the  multiline filter example

Signed-off-by: RicardoAAD <ricardo@calyptia.com>
---
 pipeline/filters/multiline-stacktrace.md | 2 +-
 pipeline/inputs/tail.md                  | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pipeline/filters/multiline-stacktrace.md b/pipeline/filters/multiline-stacktrace.md
index f6f80e446..1db4a242d 100644
--- a/pipeline/filters/multiline-stacktrace.md
+++ b/pipeline/filters/multiline-stacktrace.md
@@ -110,7 +110,7 @@ This second file defines a multiline parser for the example. Note that a second
     #
     # rules |   state name  | regex pattern                  | next state
     # ------|---------------|--------------------------------------------
-    rule      "start_state"   "/(Dec \d+ \d+\:\d+\:\d+)(.*)/"  "cont"
+    rule      "start_state"   "/([A-Za-z]+ \d+ \d+\:\d+\:\d+)(.*)/"  "cont"
     rule      "cont"          "/^\s+at.*/"                     "cont"
     
 ```
diff --git a/pipeline/inputs/tail.md b/pipeline/inputs/tail.md
index eb84b8267..fec3c2b47 100644
--- a/pipeline/inputs/tail.md
+++ b/pipeline/inputs/tail.md
@@ -178,7 +178,7 @@ In the case above we can use the following parser, that extracts the Time as `ti
 [PARSER]
     Name multiline
     Format regex
-    Regex /(?<time>Dec \d+ \d+\:\d+\:\d+)(?<message>.*)/
+    Regex /(?<time>[A-Za-z]+ \d+ \d+\:\d+\:\d+)(?<message>.*)/
     Time_Key  time
     Time_Format %b %d %H:%M:%S
 ```
@@ -190,7 +190,7 @@ If we want to further parse the entire event we can add additional parsers with
 [PARSER]
     Name multiline
     Format regex
-    Regex /(?<time>Dec \d+ \d+\:\d+\:\d+)(?<message>.*)/
+    Regex /(?<time>[A-Za-z]+ \d+ \d+\:\d+\:\d+)(?<message>.*)/
     Time_Key  time
     Time_Format %b %d %H:%M:%S