https://community.splunk.com/t5/Getting-Data-In/break-events-each-6lines/m-p/633937#M108521 <P>Hello,&nbsp;</P><P>I'm having issues with line break for some reason. I'm looking to break an event every 6 lines. Any suggestions?</P><P>Log Example:</P><P>Total Operations<BR />Currents/sec:Max/sec:Success:Failed<BR />2<BR />144<BR />184469195<BR />201<BR />Key Generate<BR />Current/sec:max/sec:Success:Failed<BR />0<BR />0<BR />0<BR />0<BR />Key Version Generate<BR />Currect/sec:Max/sec:Success:Failed<BR />0<BR />0<BR />0<BR />0<BR />Key Version Generate<BR />Currect/sec:Max/sec:Success:Failed<BR />0<BR />0<BR />0<BR />0</P><P>&nbsp;</P> Thu, 09 Mar 2023 21:24:28 GMT CarolinaHB 2023-03-09T21:24:28Z https://community.splunk.com/t5/Getting-Data-In/break-events-each-6lines/m-p/633937#M108521 <P>Hello,&nbsp;</P><P>I'm having issues with line break for some reason. I'm looking to break an event every 6 lines. Any suggestions?</P><P>Log Example:</P><P>Total Operations<BR />Currents/sec:Max/sec:Success:Failed<BR />2<BR />144<BR />184469195<BR />201<BR />Key Generate<BR />Current/sec:max/sec:Success:Failed<BR />0<BR />0<BR />0<BR />0<BR />Key Version Generate<BR />Currect/sec:Max/sec:Success:Failed<BR />0<BR />0<BR />0<BR />0<BR />Key Version Generate<BR />Currect/sec:Max/sec:Success:Failed<BR />0<BR />0<BR />0<BR />0</P><P>&nbsp;</P> Thu, 09 Mar 2023 21:24:28 GMT https://community.splunk.com/t5/Getting-Data-In/break-events-each-6lines/m-p/633937#M108521 CarolinaHB 2023-03-09T21:24:28Z https://community.splunk.com/t5/Getting-Data-In/break-events-each-6lines/m-p/633940#M108522 <P>Perhaps someone with better regex-fu than me can come with an expression that matches exactly 6 lines.&nbsp; In the meantime, this may work for you.&nbsp; It puts a break between a number and a word.</P><LI-CODE lang="markup">LINE_BREAKER = \d+([\r\n]+)\w</LI-CODE> Thu, 09 Mar 2023 19:57:30 GMT https://community.splunk.com/t5/Getting-Data-In/break-events-each-6lines/m-p/633940#M108522 richgalloway 2023-03-09T19:57:30Z