How to collect and manage all of your multi-line logs

Multi-line logs such as stack traces can provide valuable information for debugging and troubleshooting application problems. However, without proper configuration, log management services may treat each line of a multi-line log as an individual event, making it difficult to interpret the activity of your applications. To handle multi-line logs effectively, you can either log to JSON or use a log shipper that looks for specific patterns to indicate the beginning of a new log entry. Popular log shippers include Logstash, Rsyslog, Fluentd, Fluent Bit, Syslog-ng, NXLog, and the Datadog Agent. By aggregating multi-line logs as single events, you can more easily parse, search, and use them to identify problems in your environment.