https://community.splunk.com/t5/Splunk-Cloud-Platform/Splunk-WSDL/m-p/686088#M3015 <P>You would have to tell Splunk how to split the events. You can do this by setting the LINE_BREAKER field in a props.conf file in an app in your indexers.</P><P>If you could post a sample of your event (with sensitive data removed) and a rough description of your splunk setup (single machine or distributed?), then it would be easier to give you more specific pointers.</P> Wed, 01 May 2024 16:03:23 GMT marnall 2024-05-01T16:03:23Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Splunk-WSDL/m-p/685864#M3008 <P>My Source is python. In WSDL I have 20 items . While am executing the query in splunk . I am getting all 20 items coming in single event. Though unable to extract the fields and show it's count. How can i get all 20 items into individual events. How can i achieve it.&nbsp;</P><P>&nbsp;</P><P>Thanks&nbsp;</P> Mon, 29 Apr 2024 15:53:19 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Splunk-WSDL/m-p/685864#M3008 PATAN 2024-04-29T15:53:19Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Splunk-WSDL/m-p/686088#M3015 <P>You would have to tell Splunk how to split the events. You can do this by setting the LINE_BREAKER field in a props.conf file in an app in your indexers.</P><P>If you could post a sample of your event (with sensitive data removed) and a rough description of your splunk setup (single machine or distributed?), then it would be easier to give you more specific pointers.</P> Wed, 01 May 2024 16:03:23 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Splunk-WSDL/m-p/686088#M3015 marnall 2024-05-01T16:03:23Z