Enhanced Recognition of multi-line record formats (PTF DCE1140) - ironstream_for_servicenow_discovery_1 - Latest

Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Release Notes

Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Kafka®
Ironstream > Ironstream for Elastic®
Ironstream > Ironstream for Splunk®
Version
Latest
Language
English
Product name
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z®
Title
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Release Notes
First publish date
2014
Last updated
2024-09-26
Published on
2024-09-26T07:29:10.702304

DCE can recognize common formats of multi-line log records, including log4j and JavaTrace logs, and then flag the file so that multi-line log records are not sent until the next log record header has been identified. As a result, the multi-line log record is sent to the destination as one sequence of events.

For more information, refer to the “Setting Up USS File Collection” chapter in the Ironstream Configuration and User’s Guide.