Each line of the text file needs to be appeared as an event

[Rukmani_Splunk]

Hi All,
I am new to line breaking concepts. I have made a text file as input to the splunk. I want each line as an event , but all the lines are displayed as an event. I had made following modifications in props.conf file

[host::omstxt]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\\r\\n]+)

any other configurations needs to changed ?

Kindly help.

Thanks

[alacercogitatus]

Your line breaker should be:

LINE_BREAKER = ([\r\n]+)

LINE_BREAKER is a regex, and doesn't need escaped. Additionally, that regex is the default, so you don't even need to define it as long as your Line Merge is false.

[alacercogitatus]

Great! Please accept the answer so others may find it useful.

[Rukmani_Splunk]

Thanks it works:)