Duplicate logs

[martinsson]

Our config duplicates logs. We get the multi-line stacktraces in a single element but we also get the raw lines. We suspect that our config duplicates it but we don't know what would be the correct configuration of this plugin to avoid them.

In the example config there is no "catch-all" directive as in our second match directive below. Is this the one posing a problem? Can we do without it?

    <label @DISPATCH>
      <match kubernetes.**>
        @type detect_exceptions
        remove_tag_prefix kubernetes
        multiline_flush_interval 0.2
      </match>

      <match **>
        @type relabel
        @label @OUTPUT
      </match>
    </label>
    <label @OUTPUT>
      <match **>
        @type elasticsearch
        host "elasticsearch-master"
        port 9200
        path ""
        user elastic
        password changeme
      </match>
    </label>