https://community.splunk.com/t5/Getting-Data-In/Breaking-two-different-events-how/m-p/85288#M17749 <P>How to break two events together ? I need the cloudCover and update to be line break.</P> <P>BREAK_ONLY_BEFORE=cloudCover<BR /> BREAK_ONLY_BEFORE=update</P> Mon, 28 Sep 2020 14:15:33 GMT sbnoobbb 2020-09-28T14:15:33Z https://community.splunk.com/t5/Getting-Data-In/Breaking-two-different-events-how/m-p/85288#M17749 <P>How to break two events together ? I need the cloudCover and update to be line break.</P> <P>BREAK_ONLY_BEFORE=cloudCover<BR /> BREAK_ONLY_BEFORE=update</P> Mon, 28 Sep 2020 14:15:33 GMT https://community.splunk.com/t5/Getting-Data-In/Breaking-two-different-events-how/m-p/85288#M17749 sbnoobbb 2020-09-28T14:15:33Z https://community.splunk.com/t5/Getting-Data-In/Breaking-two-different-events-how/m-p/85289#M17750 <P>Hello</P> <P>As you can use a regular expression there, you could use:</P> <PRE><CODE>BREAK_ONLY_BEFORE=cloudCover|update </CODE></PRE> <P>Regards</P> Fri, 05 Jul 2013 06:49:43 GMT https://community.splunk.com/t5/Getting-Data-In/Breaking-two-different-events-how/m-p/85289#M17750 gfuente 2013-07-05T06:49:43Z