https://community.splunk.com/t5/Getting-Data-In/How-to-edit-props-conf-to-line-break-a-single-line-event-into/m-p/243736#M47181 <P>Try this</P> <PRE><CODE>LINE_BREAKER = (;\s) </CODE></PRE> Mon, 21 Nov 2016 20:34:48 GMT richgalloway 2016-11-21T20:34:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-edit-props-conf-to-line-break-a-single-line-event-into/m-p/243735#M47180 <P>I have a single line event as shown. I have to break it to multiple lines starting at <CODE>{IBP_LKL</CODE> . May I know what setting I should use in props.conf?</P> <PRE><CODE>{IBP_LKL_MKL=avfg , gfdjgkjfsidhfkhs; {IBP_LKL_MKL=bvfg, dfuihsfslj; {IBP_LKL_MKL=fgbs, sfhdgfuygsk </CODE></PRE> <P><STRONG>break it to</STRONG></P> <PRE><CODE>{IBP_LKL_MKL=avfg , gfdjgkjfsidhfkhs; {IBP_LKL_MKL=bvfg, dfuihsfslj; {IBP_LKL_MKL=fgbs, sfhdgfuygsk </CODE></PRE> Mon, 21 Nov 2016 18:58:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-edit-props-conf-to-line-break-a-single-line-event-into/m-p/243735#M47180 ankithreddy777 2016-11-21T18:58:36Z https://community.splunk.com/t5/Getting-Data-In/How-to-edit-props-conf-to-line-break-a-single-line-event-into/m-p/243736#M47181 <P>Try this</P> <PRE><CODE>LINE_BREAKER = (;\s) </CODE></PRE> Mon, 21 Nov 2016 20:34:48 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-edit-props-conf-to-line-break-a-single-line-event-into/m-p/243736#M47181 richgalloway 2016-11-21T20:34:48Z