diff --git a/on-premise/logging/fluentbit_v3.1.7/2_config/multiline.yaml b/on-premise/logging/fluentbit_v3.1.7/2_config/multiline.yaml
index 4967dbf..54d73bb 100644
--- a/on-premise/logging/fluentbit_v3.1.7/2_config/multiline.yaml
+++ b/on-premise/logging/fluentbit_v3.1.7/2_config/multiline.yaml
@@ -15,7 +15,7 @@ data:
     [SERVICE]
         Daemon Off
         Flush 1
-        Log_Level debug
+        Log_Level warn
         Parsers_File              /fluent-bit/etc/parsers.conf
         HTTP_Server On
         HTTP_Listen 0.0.0.0
@@ -51,9 +51,16 @@ data:
         multiline.parser      java
 
 
+    [FILTER]
+        name                  rewrite_tag
+        match                 multi.*
+        Rule                  $Tag ^(multi)$ normal.$TAG[1].$TAG[2] false
+
+
+
     [OUTPUT]
         Name es
-        Match *
+        Match normal.*
         Host soo-os.maintndjs.shop
         Port 9200
         Index test5