How to edit my props.conf to linebreak a Simple XML log into multiple events?

[mmensch]

Hi,

I have been trying to implement a stanza to break a long line of XML into multiple events, but it is not functioning as expected. As you can see, it is Simple XML with every "event" ending with the "/>" characters.

Sample XML:

<SAMPLE LOG Time="2016-11-07T03:19:01" User="xxxx" Action="yyyyy" /><SAMPLE LOG Time="2016-11-07T03:19:01" User="xxxx" Action="yyyyy"/>

Props.conf

[source::source-to-break]
LINE_BREAKER = />
SHOULD_LINEMERGE=true

Any help here would be appreciated.

[rodrigorsilva]

Hi,

You can try this:

[ source::source-to-break]
SHOULD_LINEMERGE=true
NO_BINARY_CHECK=true
BREAK_ONLY_BEFORE="\/>

Tks

Rodrigo Ribeiro