All Apps and Add-ons

line breaking on events not working

595147
Explorer

The events in JSON are not breaking properly. Every once in an hour I'll get a few event that are like 60+ event in one.

0 Karma

dindu
Contributor

Mostly, the payload has some additional data which prevents it from JSON auto parsing.
Please try to use the regex to break the event in props.conf

please give us a sample event type for more analysis

0 Karma

rajasekhar14
Path Finder

are you using any props.conf ?

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...