<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to extract events from an input file ( xml format) that has no line breaks? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453670#M94343</link>
    <description>&lt;P&gt;Great &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;I changed my comment to an answer, so that you can accept it.&lt;/P&gt;</description>
    <pubDate>Mon, 23 Jul 2018 08:01:24 GMT</pubDate>
    <dc:creator>FrankVl</dc:creator>
    <dc:date>2018-07-23T08:01:24Z</dc:date>
    <item>
      <title>How to extract events from an input file ( xml format) that has no line breaks?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453667#M94340</link>
      <description>&lt;P&gt;I have a log file that has contents similar to below. I would like the events separated based on the line break character. My props file has BREAK_ONLY_BEFORE =    and SHOULD_LINEMERGE = true but I continue to get the entire contents of the file as one event. Can you help me with splitting the contents of the below file into separate events using as the line break? &lt;/P&gt;

&lt;P&gt;&lt;IMG src="https://community.splunk.com/storage/temp/252279-planes.png" alt="alt text" /&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 20:34:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453667#M94340</guid>
      <dc:creator>joechakkola1</dc:creator>
      <dc:date>2020-09-29T20:34:20Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract events from an input file ( xml format) that has no line breaks?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453668#M94341</link>
      <description>&lt;P&gt;Your question is rather confusing. Your title states your data has no line breaks, yet you want us to help you break the data by linebreak?&lt;/P&gt;

&lt;P&gt;It looks like your data is a bunch of "plane" objects? Do you want each plane in a single event? Then try this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;LINE_BREAKER = ()\&amp;lt;plane\&amp;gt;
SHOULD_LINEMERGE = FALSE
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 23 Jul 2018 07:26:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453668#M94341</guid>
      <dc:creator>FrankVl</dc:creator>
      <dc:date>2018-07-23T07:26:31Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract events from an input file ( xml format) that has no line breaks?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453669#M94342</link>
      <description>&lt;P&gt;Thanks i was able to break the lines with &lt;CODE&gt;LINE_BREAKER =()\&amp;lt;plane\&amp;gt;&lt;/CODE&gt;.    Agreed my title was misleading.  what i was trying to convey is that my data does not have any return character at the end of each line. By using the line_breaker , i was able to break up the rather long line of data into individual events. &lt;/P&gt;</description>
      <pubDate>Mon, 23 Jul 2018 07:53:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453669#M94342</guid>
      <dc:creator>joechakkola1</dc:creator>
      <dc:date>2018-07-23T07:53:48Z</dc:date>
    </item>
    <item>
      <title>Re: How to extract events from an input file ( xml format) that has no line breaks?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453670#M94343</link>
      <description>&lt;P&gt;Great &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;I changed my comment to an answer, so that you can accept it.&lt;/P&gt;</description>
      <pubDate>Mon, 23 Jul 2018 08:01:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-extract-events-from-an-input-file-xml-format-that-has-no/m-p/453670#M94343</guid>
      <dc:creator>FrankVl</dc:creator>
      <dc:date>2018-07-23T08:01:24Z</dc:date>
    </item>
  </channel>
</rss>

