<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic creating / adding a blank line in between the data in the file in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97004#M97465</link>
    <description>&lt;P&gt;I have a file which contains : &lt;/P&gt;

&lt;P&gt;Hi this is really great of you !!&lt;BR /&gt;
My name is john, how are you&lt;BR /&gt;
this is no one&lt;/P&gt;

&lt;P&gt;I am appending few more lines after the last line but before that i want a single blank line to distinguish both the content as : my output should look like this : &lt;/P&gt;

&lt;HR /&gt;

&lt;P&gt;Hi this is really great of you !!&lt;BR /&gt;
My name is john, how are you&lt;BR /&gt;
this is no one&lt;/P&gt;

&lt;P&gt;Hi, this is my new line started&lt;BR /&gt;
I am happy to know you&lt;BR /&gt;
great people always smile&lt;/P&gt;

&lt;HR /&gt;</description>
    <pubDate>Fri, 19 Oct 2012 20:49:02 GMT</pubDate>
    <dc:creator>abhayneilam</dc:creator>
    <dc:date>2012-10-19T20:49:02Z</dc:date>
    <item>
      <title>creating / adding a blank line in between the data in the file</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97004#M97465</link>
      <description>&lt;P&gt;I have a file which contains : &lt;/P&gt;

&lt;P&gt;Hi this is really great of you !!&lt;BR /&gt;
My name is john, how are you&lt;BR /&gt;
this is no one&lt;/P&gt;

&lt;P&gt;I am appending few more lines after the last line but before that i want a single blank line to distinguish both the content as : my output should look like this : &lt;/P&gt;

&lt;HR /&gt;

&lt;P&gt;Hi this is really great of you !!&lt;BR /&gt;
My name is john, how are you&lt;BR /&gt;
this is no one&lt;/P&gt;

&lt;P&gt;Hi, this is my new line started&lt;BR /&gt;
I am happy to know you&lt;BR /&gt;
great people always smile&lt;/P&gt;

&lt;HR /&gt;</description>
      <pubDate>Fri, 19 Oct 2012 20:49:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97004#M97465</guid>
      <dc:creator>abhayneilam</dc:creator>
      <dc:date>2012-10-19T20:49:02Z</dc:date>
    </item>
    <item>
      <title>Re: creating / adding a blank line in between the data in the file</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97005#M97466</link>
      <description>&lt;P&gt;What does this have to do with Splunk? Surely you need to either specify you scenario if it is related!&lt;/P&gt;</description>
      <pubDate>Sat, 20 Oct 2012 11:08:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97005#M97466</guid>
      <dc:creator>MHibbin</dc:creator>
      <dc:date>2012-10-20T11:08:46Z</dc:date>
    </item>
    <item>
      <title>Re: creating / adding a blank line in between the data in the file</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97006#M97467</link>
      <description>&lt;P&gt;Are your lines parts of the same events ?&lt;/P&gt;

&lt;P&gt;If the pattern is easy to recognize, I would recommend to use a sed command to add new lines characters.&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;at search time with &lt;CODE&gt;| rex field=_raw mode=sed "s/mylastword/mylastword\n/g"&lt;/CODE&gt;&lt;/LI&gt;
&lt;LI&gt;or at index time (more radical) with the sedcmd&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;in both case, please read the documentation for the commands.&lt;/P&gt;

&lt;P&gt;If the pattern is not common, then you'd better fix your source format before indexing it.&lt;/P&gt;</description>
      <pubDate>Sat, 20 Oct 2012 17:13:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/creating-adding-a-blank-line-in-between-the-data-in-the-file/m-p/97006#M97467</guid>
      <dc:creator>yannK</dc:creator>
      <dc:date>2012-10-20T17:13:14Z</dc:date>
    </item>
  </channel>
</rss>

