codec.multiline loses log

[woshihaoren]

THis is cconfiguration

input {
    file {
        path => "/opt/app/tomcat/*/logs/*.log"
        codec => multiline {
            pattern => "(^%{LOGLEVEL})"
            negate => true
            what => "previous"
        }
    }
}

Because multiline is previous, last log doesn't collection,
It's waiting for the next one to start with %{LOGLEVEL}.

When I kill logstash,Then loses last group log.

[guyboertje]

This is a known problem. It will be fixed in a feature I'm calling auto-flush. We will release this in the next LS 2.X version early Jan 2016.