https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472574#M81207 <P>I'm monitor a folder with some file. Could I make whole file as one event without line_breaker? I've tried transaction by source but it does not working as well as I want.</P> Wed, 25 Dec 2019 04:51:12 GMT vietlq414 2019-12-25T04:51:12Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472574#M81207 <P>I'm monitor a folder with some file. Could I make whole file as one event without line_breaker? I've tried transaction by source but it does not working as well as I want.</P> Wed, 25 Dec 2019 04:51:12 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472574#M81207 vietlq414 2019-12-25T04:51:12Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472575#M81208 <P><span class="lia-inline-image-display-wrapper"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8131i4461D52C70609C73/image-size/large?v=v2&amp;px=999" title="alt text" alt="alt text" /></span></P> <P>When you monitor, choose <CODE>Event Breaks&gt;Regex</CODE> and type <CODE>([\r].*)</CODE><BR /> Hope that it can help you!</P> Wed, 25 Dec 2019 07:52:19 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472575#M81208 outis 2019-12-25T07:52:19Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472576#M81209 <P>my file has more than 100000 line. i've try and add TRUNCATE properties but it did not work.</P> Wed, 25 Dec 2019 08:41:30 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-ignore-line-breaker-raw-data/m-p/472576#M81209 vietlq414 2019-12-25T08:41:30Z