Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

props.conf how to break event after every new line?

$
0
0
As stated in the question, my props.conf has the following settings: [daemonforCent] LINE_BREAKER = ([\r\n]+) SHOULD_LINEMERGE=false And as you can see, the result is still the same, not breaking anything. I've tried BREAK_ONLY_BEFORE=\r\n too but also will not work. ![alt text][1] [1]: /storage/temp/216825-capture.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>