https://community.splunk.com/t5/Getting-Data-In/Can-I-use-backreferences-in-LINE-BREAKER/m-p/41568#M7735 <P>Complete silence, let's tag this as impossible <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Sun, 09 Dec 2012 17:19:41 GMT Paolo_Prigione 2012-12-09T17:19:41Z https://community.splunk.com/t5/Getting-Data-In/Can-I-use-backreferences-in-LINE-BREAKER/m-p/41567#M7734 <P>I want to group consecutive lines starting with the same pattern. I know the TRANSACTION command can be used as well, but having it already indexed correctly would be very handy...</P> <P>Something like </P> <PRE><CODE>LINE_BREAKER = ([\n\r]+)((\S+\s+){4}).*([\n\r]+\2.*)* </CODE></PRE> <P>Thanks,<BR /> Paolo</P> Tue, 12 Jul 2011 15:52:45 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-use-backreferences-in-LINE-BREAKER/m-p/41567#M7734 Paolo_Prigione 2011-07-12T15:52:45Z https://community.splunk.com/t5/Getting-Data-In/Can-I-use-backreferences-in-LINE-BREAKER/m-p/41568#M7735 <P>Complete silence, let's tag this as impossible <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Sun, 09 Dec 2012 17:19:41 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-use-backreferences-in-LINE-BREAKER/m-p/41568#M7735 Paolo_Prigione 2012-12-09T17:19:41Z