https://community.splunk.com/t5/Splunk-Cloud-Platform/Line-breaking-issue/m-p/643170#M2236 <P><STRONG>Hello</STRONG></P><P><STRONG>Need some help on below issue.</STRONG></P><P>05-11-2023 07:01:23:156 -0400 ERROR LineBreakingProcessor [1956104 parsing_3] - Line breaking regex has no capturing groups: ^\{ - data_source="D:\Apps.......TXT", .....</P><P>My Props :</P><P>LINE BREAKER=^\{</P><P><SPAN>NO BINARY CHECK-true</SPAN></P><P>BREAK ONLY_BEFORE=^\{</P><P>CHARSET=UTF-8</P><P>disabled=false</P><P>KV MODE=json</P><P>MAX TIMESTAMP LOOKAHEAD=70</P><P>TIME PREFIX=timeStamplevtime"\: \s*"&nbsp;</P><P>TIME FORMAT=%Y-%m-%dT%I:%M:%S</P><P>TRUNCATE=999999</P><P>&nbsp;</P><P>Sample logs :</P><P>{</P><P><SPAN>"maexUniqueld": "414D51204D4532352020202020202020B3A95C64016F0040",</SPAN></P><P><SPAN>"mgexEventCommon": {</SPAN></P><P><SPAN>"examgr": "ME25",</SPAN></P><P><SPAN>"exreason": "CHLSTPU",</SPAN></P><P><SPAN>"extype": "CHANNEL",</SPAN></P><P><SPAN>"evobjname": "DIRECT.TCP",</SPAN></P><P><SPAN>"exobjtype": "CHANNEL",</SPAN></P><P><SPAN>"evuserid":"",</SPAN></P><P><SPAN>"summary": "Channel - Stopped by User - Channel:DIRECT.TCP",</SPAN></P><P><SPAN>"cfbcmd": 46,</SPAN></P><P><SPAN>"cfhreason": 2279,</SPAN></P><P><SPAN>"extime": "2023-05-11T08:39:23Z",</SPAN></P><P><SPAN>"extimesecs": 1683794363</SPAN></P><P><SPAN>},</SPAN></P><P><SPAN>"mgexData": {</SPAN></P><P><SPAN>"channe</SPAN></P><P>l": "DIRECT.TCP",</P><P><SPAN>"csnqual": 10</SPAN></P><P>}</P> Fri, 12 May 2023 09:29:12 GMT jackin 2023-05-12T09:29:12Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Line-breaking-issue/m-p/643170#M2236 <P><STRONG>Hello</STRONG></P><P><STRONG>Need some help on below issue.</STRONG></P><P>05-11-2023 07:01:23:156 -0400 ERROR LineBreakingProcessor [1956104 parsing_3] - Line breaking regex has no capturing groups: ^\{ - data_source="D:\Apps.......TXT", .....</P><P>My Props :</P><P>LINE BREAKER=^\{</P><P><SPAN>NO BINARY CHECK-true</SPAN></P><P>BREAK ONLY_BEFORE=^\{</P><P>CHARSET=UTF-8</P><P>disabled=false</P><P>KV MODE=json</P><P>MAX TIMESTAMP LOOKAHEAD=70</P><P>TIME PREFIX=timeStamplevtime"\: \s*"&nbsp;</P><P>TIME FORMAT=%Y-%m-%dT%I:%M:%S</P><P>TRUNCATE=999999</P><P>&nbsp;</P><P>Sample logs :</P><P>{</P><P><SPAN>"maexUniqueld": "414D51204D4532352020202020202020B3A95C64016F0040",</SPAN></P><P><SPAN>"mgexEventCommon": {</SPAN></P><P><SPAN>"examgr": "ME25",</SPAN></P><P><SPAN>"exreason": "CHLSTPU",</SPAN></P><P><SPAN>"extype": "CHANNEL",</SPAN></P><P><SPAN>"evobjname": "DIRECT.TCP",</SPAN></P><P><SPAN>"exobjtype": "CHANNEL",</SPAN></P><P><SPAN>"evuserid":"",</SPAN></P><P><SPAN>"summary": "Channel - Stopped by User - Channel:DIRECT.TCP",</SPAN></P><P><SPAN>"cfbcmd": 46,</SPAN></P><P><SPAN>"cfhreason": 2279,</SPAN></P><P><SPAN>"extime": "2023-05-11T08:39:23Z",</SPAN></P><P><SPAN>"extimesecs": 1683794363</SPAN></P><P><SPAN>},</SPAN></P><P><SPAN>"mgexData": {</SPAN></P><P><SPAN>"channe</SPAN></P><P>l": "DIRECT.TCP",</P><P><SPAN>"csnqual": 10</SPAN></P><P>}</P> Fri, 12 May 2023 09:29:12 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Line-breaking-issue/m-p/643170#M2236 jackin 2023-05-12T09:29:12Z