i m trying to monitor a json file with custom sourcetype for line breaking that i have build but not getting events . But the same json file, if i'll upload with same custom sourcetype it is able to index properly and events are showing with correct parsing. And, also if i monitor the same json file with predefined sourcetype=_json it is able to index the file and showing the events though the parsing is wrong.
Any suggestions?
