Clark Boylan d2e3cc232f Handle journald timestamps in multiline logstash ...

Journald uses syslog not iso8601 timestamps. Handle both in the
mutliline rules for oslofmt so that we properly append multiline events
together. As is we treat the entire document as one large multiline
event.

Change-Id: I8eb865c9f31f26eada3318d06373bc71aacda047

2017-05-03 08:34:04 -07:00

..

openstack_project

Handle journald timestamps in multiline logstash

2017-05-03 08:34:04 -07:00