How do I use the line breaker parameter in props.conf?

[ethanthomas]

Can someone tell me how to use the line breaker parameter fo the below events which is currently getting clustered together .

{"sdsf shcdzvdvv zdcnvdzvvdd."}

{bfdf  dvdfd  dfdfdf ddgvdvdfd."}

{dfdfd dfdfd dgdgd dgdgdgdgg."}

Props .conf

LINE_BREAKER = (\.\"\})

[gcusello]

Hi @ethanthomas,

could you share a sample of your complete logs?

Ciao.

Giuseppe

[richgalloway]

A key thing to remember about LINE_BREAKER is the text matched by the first capture is discarded.

Based on my assumption that each event starts with a left brace this setting may work:

LINE_BREAKER = ([\r\n]+)\{