How do you filter a multiline logs with this example

[kelptan]

Hi Threre.

Pretty new with fluentd and regex. Here i am trying to filter the logs (multiline) to extract the data. Examples as per below. any help would be great.

<source>
  @type tail
  @id input_tail
  <parse>
#    @type apache2
#       @type regexp
#       @type json
#       format json
        @type multiline
        format_firstline /Event[Ringing|Established|Released]/
        format1 /(?<payload>^PartyMessage[\s\S]*previousCallId=null\))/
  </parse>

05/28/2023 01:11:25.459 DEBUG [] [] [] [com.genesyslab.PCT.invoker.EventBrokerEx:TServer:ON_PREMISE_ENVIRONMENT:4250e5f9-6be9-4774-a7d6-7b5ec5ccbba1] c.g.c.v.a.e.t.TelephonyStateEventHandlerV2 Handling update message:
PartyMessage(super=InteractionMessage(super=BasicTelephonyMessage(message='EventReleased' (65) attributes:
AttributeConnID [long] = 0202035686fd8016
AttributePropagatedCallType [int] = 3 [Outbound]
AttributeUserData [bstr] = KVList:
'IW_RoutingBasedOriginalEmployeeId' [str] = "TestSupervisorGT"
'IW_RoutingBasedTargetId' [str] = "91599556"
'IW_RoutingBasedTargetType' [str] = "TypeDestination"
'IW_RoutingBasedRequestType' [str] = "MakeCall"
'PhoneNumber' [str] = "915xxxxxx"
'IW_CaseUid' [str] = "84e2ca3e-a88d-43b8-825f-35cfe6d97c47"
'IW_BundleUid' [str] = "f16cd905-63de-42d7-455a-e940c11c3724"
'WWE_PARTY_8000' [lst] = KVList:
'username' [str] = "TestSupervisor"
'firstname' [str] = "TestSupervisor"
'lastname' [str] = "GT"
'path' [str] = "/users/b19c59e2409f48ada6846b461549f3d1"
'IW_SelectedCallerId' [str] = "6567xxxxxx"
'ContactId' [str] = "00002aHNKW9G0031"
'IWAttachedDataInformation' [lst] = KVList:
'CaseDataBusinessAttribute' [str] = "CaseData"
'DispositionCode.Key' [str] = "DispositionCode"
'Option.interaction.case-data.frame-color' [str] = "#17849D"
'Option.interaction.case-data.header-foreground-color' [str] = "#FFFFFF"
'DispositionCode.Label' [str] = "Disposition Code"
'SelectedDispositionCodeName' [str] = ""
AttributeCallID [int] = 16777238
AttributeCallType [int] = 3 [Outbound]
AttributeCallUuid [str] = "PJ3MVSD3HP0R11N9NI1GVLR2VK00000M"
AttributeThisDN [str] = "8000"
AttributeCustomerID [str] = "POC"
AttributeExtensions [bstr] = KVList:
'OtherTrunkName' [str] = "Gateway"
'BusinessCall' [int] = 0
AttributeOtherDNRole [int] = 2 [RoleDestination]
AttributeReferenceID [int] = 13
AttributeDNIS [str] = "xxxxxxx"
AttributeThisDNRole [int] = 1 [RoleOrigination]
AttributeAgentID [str] = "8000"
AttributeANI [str] = "8000"
AttributeCallState [int] = 0
AttributeOtherDN [str] = "065xxxxxxx"
AttributeEventSequenceNumber [long] = 1306
AttributePartyUuid [str] = "F1BO6TCC1L50H381PINI1FCT2400009J"
TimeStamp:
AttributeTimeinSecs [int] = 1685236285
AttributeTimeinuSecs [int] = 456000, createdNanoTime=18922985754599971), interaction=Party(dn=8000, context=PartyContext(status=Released, prevStatus=Dialing, transaction=null, callType=Outbound, queue=null, callState=Ok, monitoringMode=null, monitoringScope=null, mutedState=Unmuted, isDialing=false, destinationBusy=false), startTime=1685236278039, interactionType=Party, key=1@8000@0202035686fd8016, connId=0202035686fd8016, mediaChannel=com.genesyslab.tel.model.MediaChannel@75f6b63d, parentConnId=null, parentCallId=null, callUuid=PJ3MVSD3HP0R11N9NI1GVLR2VK00000M, ani=8000, dnis=xxxxxxxx, refPartyKey=null, extensions=KVList:
'OtherTrunkName' [str] = "Gateway"
'BusinessCall' [int] = 0, userData=KVList:
'IW_RoutingBasedOriginalEmployeeId' [str] = "TestSupervisorGT"
'IW_RoutingBasedTargetId' [str] = "xxxxxxxxx"
'IW_RoutingBasedTargetType' [str] = "TypeDestination"
'IW_RoutingBasedRequestType' [str] = "MakeCall"
'PhoneNumber' [str] = "xxxxxxxxx"
'IW_CaseUid' [str] = "84e2ca3e-a88d-43b8-825f-35cfe6d97c47"
'IW_BundleUid' [str] = "f16cd905-63de-42d7-455a-e940c11c3724"
'WWE_PARTY_8000' [lst] = KVList:
'username' [str] = "TestSupervisorGT"
'firstname' [str] = "TestSupervisor"
'lastname' [str] = "GT"
'path' [str] = "/users/b19c59e2409f48ada6846b461549f3d1"
'IW_SelectedCallerId' [str] = "6567213832"
'ContactId' [str] = "00002aHNKW9G0031"
'IWAttachedDataInformation' [lst] = KVList:
'CaseDataBusinessAttribute' [str] = "CaseData"
'DispositionCode.Key' [str] = "DispositionCode"
'Option.interaction.case-data.frame-color' [str] = "#17849D"
'Option.interaction.case-data.header-foreground-color' [str] = "#FFFFFF"
'DispositionCode.Label' [str] = "Disposition Code"
'SelectedDispositionCodeName' [str] = "", firstConferencePartyDN=null, users=[8000], recordingState=null, switchConnId=0, monitoredUserMuted=false, targetSkill=null, participants={0xxxxxxx=Participant(number=06591xxxxxx, role=RoleDestination, monitoringMode=null)}, voiceInstantMessages={}), user=8000), type=StatusChange, previousCallId=null)