Getting Data In

How to edit props.conf to line break a single line event into multiple lines?

ankithreddy777
Contributor

I have a single line event as shown. I have to break it to multiple lines starting at {IBP_LKL . May I know what setting I should use in props.conf?

{IBP_LKL_MKL=avfg , gfdjgkjfsidhfkhs; {IBP_LKL_MKL=bvfg, dfuihsfslj; {IBP_LKL_MKL=fgbs, sfhdgfuygsk

break it to

{IBP_LKL_MKL=avfg , gfdjgkjfsidhfkhs;
{IBP_LKL_MKL=bvfg, dfuihsfslj; 
{IBP_LKL_MKL=fgbs, sfhdgfuygsk
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Try this

LINE_BREAKER = (;\s)
---
If this reply helps you, an upvote would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Try this

LINE_BREAKER = (;\s)
---
If this reply helps you, an upvote would be appreciated.

View solution in original post

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.