https://community.splunk.com/t5/Splunk-Search/how-remove-extra-new-line/m-p/386707#M171087 <P>At search time you can run this sed statement to remove all line breaks:</P> <PRE><CODE>search string | rex mode=sed field=_raw "s/\n/ /g" </CODE></PRE> <P>Here's a regex 101 example showing the results: <A href="https://regex101.com/r/uNUBum/1">https://regex101.com/r/uNUBum/1</A></P> Fri, 24 May 2019 18:33:28 GMT dmarling 2019-05-24T18:33:28Z https://community.splunk.com/t5/Splunk-Search/how-remove-extra-new-line/m-p/386706#M171086 <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7100i40D00C258F7F9ED1/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span><BR /> i need that all lines will be one line, without newline </P> Fri, 24 May 2019 15:11:31 GMT https://community.splunk.com/t5/Splunk-Search/how-remove-extra-new-line/m-p/386706#M171086 alina_mandarina 2019-05-24T15:11:31Z https://community.splunk.com/t5/Splunk-Search/how-remove-extra-new-line/m-p/386707#M171087 <P>At search time you can run this sed statement to remove all line breaks:</P> <PRE><CODE>search string | rex mode=sed field=_raw "s/\n/ /g" </CODE></PRE> <P>Here's a regex 101 example showing the results: <A href="https://regex101.com/r/uNUBum/1">https://regex101.com/r/uNUBum/1</A></P> Fri, 24 May 2019 18:33:28 GMT https://community.splunk.com/t5/Splunk-Search/how-remove-extra-new-line/m-p/386707#M171087 dmarling 2019-05-24T18:33:28Z