Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Xml logs event separation

$
0
0
Hi. I have 10000 xml log output. like : {LOG DATE.../DATE TIME.../TIME CC.../CC AMOUNT.../AMOUNT /LOG} I need to break event after every .each event should like that between two tag. I am trying to change the configuration in the props.conf but I still could not break the event into LOG. I tried to configure in the props.conf like : BREAK_ONLY_BEFORE = ([\r\n]*)LOG LINE_BREAKER = ([\r\n]*)LOG SHOULD_LINEMERGE = false Thanks for in advance

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>