https://community.splunk.com/t5/Getting-Data-In/transforms-on-mult-line-events/m-p/131618#M27072 <P>Sure, working with multilines is no biggie. Remember to use <CODE>(?s)</CODE> and <CODE>(?m)</CODE> flags appropriately to influence the matching behavior of <CODE>.</CODE>, <CODE>^</CODE>, and <CODE>$</CODE> according to your needs.</P> <P>Any specific examples?</P> Tue, 15 Apr 2014 08:07:56 GMT martin_mueller 2014-04-15T08:07:56Z https://community.splunk.com/t5/Getting-Data-In/transforms-on-mult-line-events/m-p/131617#M27071 <P>Hi,</P> <P>Does transforms recognize multi-line events? If I have a multi-line event, and I want to filter out based upon some text in it, is that possible? Or does it look at each line individually?</P> Tue, 15 Apr 2014 01:36:59 GMT https://community.splunk.com/t5/Getting-Data-In/transforms-on-mult-line-events/m-p/131617#M27071 a212830 2014-04-15T01:36:59Z https://community.splunk.com/t5/Getting-Data-In/transforms-on-mult-line-events/m-p/131618#M27072 <P>Sure, working with multilines is no biggie. Remember to use <CODE>(?s)</CODE> and <CODE>(?m)</CODE> flags appropriately to influence the matching behavior of <CODE>.</CODE>, <CODE>^</CODE>, and <CODE>$</CODE> according to your needs.</P> <P>Any specific examples?</P> Tue, 15 Apr 2014 08:07:56 GMT https://community.splunk.com/t5/Getting-Data-In/transforms-on-mult-line-events/m-p/131618#M27072 martin_mueller 2014-04-15T08:07:56Z