<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Event breaking does not work for SMS debug and SMPP debug logs in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Event-breaking-does-not-work-for-SMS-debug-and-SMPP-debug-logs/m-p/546372#M91007</link>
    <description>&lt;P&gt;Hi ,&lt;/P&gt;&lt;P&gt;I am trying to break events which are merging for SMS and SMPP logs.&lt;/P&gt;&lt;P&gt;only the events with binary codes are breaking and rest are still merging.Can anyone advice how I can break events here.&lt;/P&gt;&lt;P&gt;Props I am using is as below&lt;/P&gt;&lt;P&gt;KV_MODE = none&lt;BR /&gt;BREAK_ONLY_BEFORE = \d{2}:\d{2}:\d{2}:\d{3}\s+(\d+\w+)&lt;BR /&gt;NO_BINARY_CHECK = true&lt;BR /&gt;SHOULD_LINEMERGE = true&lt;/P&gt;&lt;P&gt;and&amp;nbsp;&lt;/P&gt;&lt;P&gt;KV_MODE = none&lt;BR /&gt;NO_BINARY_CHECK = true&lt;BR /&gt;SHOULD_LINEMERGE = false&amp;nbsp;&lt;/P&gt;&lt;P&gt;TIME_FORMAT=%H:%M:%S:%3N&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;09:55:26:008 (000005A0) --IP--&amp;nbsp; --: WaitForResponseSMPP: SMPP Debug: ioctlsocket failed, no data&lt;BR /&gt;09:55:26:935 (000007B8) --IP--&amp;nbsp; --: WaitForResponseSMPP: SMPP Debug: ioctlsocket failed, no data&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; --: WaitForResponseSMPP: SMPP Debug: received a submit message&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 103 byte packet&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 00 00 00 67 00 00 00 04 00 00 00 00 00 05 5E C1 g ^&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 00 00 00 36 30 30 30 30 30 30 34 00 00 00 35 32 60000004 52&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 69 6D 57 52 36 4A 73 2F 69 31 69 41 47 4F 45 4D imWR6Js/i1iAGOEM&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 71 75 6E 52 6E 61 71 qunRnaq&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;SMSDebug log&lt;/P&gt;&lt;P&gt;10:00:11:467 [21] CHECKLF0004###0010\5F7ACFDA.REQ: WAIT&lt;BR /&gt;10:00:11:467 [23] CHECKLF0004LF0004###0010\5F7ACFDA.REQ: WAIT&lt;BR /&gt;10:00:11:640 [22] VWPRODEGOLF0004###0010\5F7ACFDA.REQ: WAIT&lt;BR /&gt;10:00:11:815 [5] ThreadListenForSMPPConnections: Before accept&lt;BR /&gt;10:00:11:815 [5] ThreadListenForSMPPConnections: After accept&lt;BR /&gt;10:00:11:815 [29] ThreadProcessSMPPConnection: Processing SMPP connection from IP...&lt;BR /&gt;10:00:11:908 [28] ThreadProcessSMPPConnection: Releasing SMPP connection from IP&lt;BR /&gt;10:00:11:909 [28] WaitForSocketClose: WinSock reported ioctlsocket complete&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 01 Apr 2021 14:07:19 GMT</pubDate>
    <dc:creator>Sujithkumarkb</dc:creator>
    <dc:date>2021-04-01T14:07:19Z</dc:date>
    <item>
      <title>Event breaking does not work for SMS debug and SMPP debug logs</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Event-breaking-does-not-work-for-SMS-debug-and-SMPP-debug-logs/m-p/546372#M91007</link>
      <description>&lt;P&gt;Hi ,&lt;/P&gt;&lt;P&gt;I am trying to break events which are merging for SMS and SMPP logs.&lt;/P&gt;&lt;P&gt;only the events with binary codes are breaking and rest are still merging.Can anyone advice how I can break events here.&lt;/P&gt;&lt;P&gt;Props I am using is as below&lt;/P&gt;&lt;P&gt;KV_MODE = none&lt;BR /&gt;BREAK_ONLY_BEFORE = \d{2}:\d{2}:\d{2}:\d{3}\s+(\d+\w+)&lt;BR /&gt;NO_BINARY_CHECK = true&lt;BR /&gt;SHOULD_LINEMERGE = true&lt;/P&gt;&lt;P&gt;and&amp;nbsp;&lt;/P&gt;&lt;P&gt;KV_MODE = none&lt;BR /&gt;NO_BINARY_CHECK = true&lt;BR /&gt;SHOULD_LINEMERGE = false&amp;nbsp;&lt;/P&gt;&lt;P&gt;TIME_FORMAT=%H:%M:%S:%3N&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;09:55:26:008 (000005A0) --IP--&amp;nbsp; --: WaitForResponseSMPP: SMPP Debug: ioctlsocket failed, no data&lt;BR /&gt;09:55:26:935 (000007B8) --IP--&amp;nbsp; --: WaitForResponseSMPP: SMPP Debug: ioctlsocket failed, no data&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; --: WaitForResponseSMPP: SMPP Debug: received a submit message&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 103 byte packet&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 00 00 00 67 00 00 00 04 00 00 00 00 00 05 5E C1 g ^&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 00 00 00 36 30 30 30 30 30 30 34 00 00 00 35 32 60000004 52&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 69 6D 57 52 36 4A 73 2F 69 31 69 41 47 4F 45 4D imWR6Js/i1iAGOEM&lt;BR /&gt;09:55:27:347 (000007D0) --IP--&amp;nbsp; &amp;lt;-: 71 75 6E 52 6E 61 71 qunRnaq&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;SMSDebug log&lt;/P&gt;&lt;P&gt;10:00:11:467 [21] CHECKLF0004###0010\5F7ACFDA.REQ: WAIT&lt;BR /&gt;10:00:11:467 [23] CHECKLF0004LF0004###0010\5F7ACFDA.REQ: WAIT&lt;BR /&gt;10:00:11:640 [22] VWPRODEGOLF0004###0010\5F7ACFDA.REQ: WAIT&lt;BR /&gt;10:00:11:815 [5] ThreadListenForSMPPConnections: Before accept&lt;BR /&gt;10:00:11:815 [5] ThreadListenForSMPPConnections: After accept&lt;BR /&gt;10:00:11:815 [29] ThreadProcessSMPPConnection: Processing SMPP connection from IP...&lt;BR /&gt;10:00:11:908 [28] ThreadProcessSMPPConnection: Releasing SMPP connection from IP&lt;BR /&gt;10:00:11:909 [28] WaitForSocketClose: WinSock reported ioctlsocket complete&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 01 Apr 2021 14:07:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Event-breaking-does-not-work-for-SMS-debug-and-SMPP-debug-logs/m-p/546372#M91007</guid>
      <dc:creator>Sujithkumarkb</dc:creator>
      <dc:date>2021-04-01T14:07:19Z</dc:date>
    </item>
  </channel>
</rss>

