Dashboards & Visualizations

line breaking not working.

athorat
Communicator

Events are no breaking by the below used settings in props.conf, all the events are indexed as one event.

Even if I uncomment BREAK_ONLY_BEFORE with a couple of variations , no go

Props.conf
SHOULD_LINEMERGE = false

BREAK_ONLY_BEFORE=[\d+:\d+:\d+]

MAX_TIMESTAMP_LOOKAHEAD=22
LINE_BREAKER = ([\r\n]+)
CHARSET=UTF-8
EVENT_BREAKER_ENABLE = true
EVENT_BREAKER = ([\r\n]+)
disabled=false

[20:53:01] :         [BBGen] essbase.yml -> Warning: no bookmarks generated for stanza 1 in configs/essbase.yml.
[20:53:01] :         [BBGen] essbase.cfg
[20:53:01] :         [BBGen] exasolution.yml -> exasolution.cfg
[20:53:01] :         [BBGen] exceldirect.yml -> exceldirect.cfg
[20:53:01] :         [BBGen] genericodbc-derived.yml -> genericodbc-derived.cfg
[20:53:01] :         [BBGen] genericodbc.yml -> genericodbc.cfg
[20:53:01] :         [BBGen] googlecloudsql.yml -> googlecloudsql.cfg
[20:53:01] :         [BBGen] greenplum.yml -> greenplum.cfg
[20:53:01] :         [BBGen] hadoophive.yml -> hadoophive.cfg
[20:53:01] :         [BBGen] hadoophive_AWS.yml -> hadoophive_AWS.cfg
[20:53:01] :         [BBGen] hadoophive_hortonworks.yml -> hadoophive_hortonworks.cfg
[20:53:01] :         [BBGen] hadoophive_mapr.yml -> hadoophive_mapr.cfg
[20:53:01] :         [BBGen] hana.yml -> hana.cfg
[20:53:01] :         [BBGen] impala.yml -> impala.cfg
[20:53:01] :         [BBGen] jet.yml -> Warning: no bookmarks generated for stanza 1 in configs/jet.yml.
[20:53:01] :         [BBGen] jet.cfg
[20:53:01] :         [BBGen] kognitio.yml -> kognitio.cfg
[20:53:01] :         [BBGen] maps.yml -> maps.cfg
[20:53:01] :         [BBGen] marklogic.yml -> Warning: no bookmarks generated for stanza 1 in configs/marklogic.yml.
[20:53:01] :         [BBGen] marklogic.cfg
[20:53:01] :         [BBGen] mdx.yml -> Warning: no bookmarks generated for stanza 1 in configs/mdx.yml.
[20:53:01] :         [BBGen] mdx.cfg
[20:53:01] :         [BBGen] memsql.yml -> memsql.cfg
[20:53:01] :         [BBGen] msolap.yml -> Warning: no bookmarks generated for stanza 1 in configs/msolap.yml.
[20:53:01] :         [BBGen] msolap.cfg
[20:53:01] :         [BBGen] mysql.yml -> mysql.cfg
Tags (2)
0 Karma
1 Solution

sbbadri
Motivator

[autolearned__ ]
SHOULD_LINEMERGE=false
NO_BINARY_CHECK=true
LINE_BREAKER=([\r\n]+)\[\d+:\d+:\d+\]
TIME_FORMAT=%H:%M:%S
TIME_PREFIX=^[
TZ=America/New_York

View solution in original post

0 Karma

sbbadri
Motivator

[autolearned__ ]
SHOULD_LINEMERGE=false
NO_BINARY_CHECK=true
LINE_BREAKER=([\r\n]+)\[\d+:\d+:\d+\]
TIME_FORMAT=%H:%M:%S
TIME_PREFIX=^[
TZ=America/New_York

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...