Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How can I break up one long line into multiple events?

$
0
0
I have a file that contains one really long line, see below Example: ["2017-10-09 13:05",976.0,"OK"],["2017-10-09 13:06",908.0,"OK"],["2017-10-09 13:07",1001.0,"OK"] ...... And so on.. How can I break up each ["2017-10-09 13:05",976.0,"OK"] into events? I first tried to accomplish this in props.conf with no luck. So now Im adding the file using "upload file" just to see if I can breake the line, still with no luck.. Any pointers would be much appriciated

Viewing all articles
Browse latest Browse all 47296


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>