anchor.diff:  ===== include_lines
   
   A list of regular expressions to match the lines that you want Filebeat to include. Filebeat exports only the lines that match a regular expression in the list. By default, all lines are exported.
  +
  +If <<multiline>> is also specified, each multiline message is combined into a single line before the lines are filtered by `include_lines`. 
   
   The following example configures Filebeat to export any lines that start with "ERR" or "WARN":
   
  
positive.code: The maximum number of bytes that a single log message can have. All bytes after `max_bytes` are discarded and not sent.
  This setting is especially useful for multiline log messages, which can get large. The default is 10MB (10485760).
  
  ===== multiline
  
  Options that control how Filebeat deals with log messages that span multiple lines. Multiline messages are common in files that contain Java stack traces. 
  
negative.code: 
  A list of regular expressions to match the lines that you want Filebeat to exclude. Filebeat drops any lines that match a regular expression in the list. By default, no lines are dropped.
  
  If <<multiline>> is also specified, each multiline message is combined into a single line before the lines are filtered by `exclude_lines`. 
  
  The following example configures Filebeat to drop any lines that start with "DBG".
  
  [source,yaml]
  