After some trial and error, I've figured it out what the problem was:

1. Had to update my rules in MULTILINE_PARSER to not consider time, stream and logtag
2. add parser flag in MULTILINE_PARSER and point to cri, which will parse every line and remove time, stream and logtag

This way the multiline parser will know which lines are to be merged.