How can we split the lines in logs as individual events?

[anandhalagarasa]

Hi Team,

Currently we have the logs getting indexed into Splunk in this format but we require that each line has to be indexed separately in Splunk.

But this didnt worked and hence once again we are getting all lines as a single event so kindly let me know the props.conf also how to monitor the same with the servername instead of sourcetype.

[esix_splunk]

Where in your environment is the props.conf file? If you're in a distributed environment, this should be on your indexers.

[anandhalagarasa]

It has been already placed in indexers only. But still its not working as expected.