props.conf how to break event after every new line?

[Kitteh]

As stated in the question, my props.conf has the following settings:

[daemonforCent]
LINE_BREAKER = ([\r\n]+)
SHOULD_LINEMERGE=false

And as you can see, the result is still the same, not breaking anything. I've tried BREAK_ONLY_BEFORE=\r\n too but also will not work.

[dantimola]

Was your problem resolved already? Please give me feedback as I'm having the same problem as well. Thank you.

[jkat54]

Your props.conf is correct but these settings only apply at index time. You will need to be sure the props are on the forwarder(s) or indexer(s), and reingest any data that wasn’t properly ingested before.

[Kitteh]

they are done at the forwarders which worked well for ubuntu side with similar props settings.

[MuS]

Is this forwarders as in parsing heavy weight forwarders?

[gcusello]

Hi Kitteh,
let me understand: do you want to have a row in each event?
if yes use SHOULD_LINEMERGE = false

Bye.
Giuseppe

[Kitteh]

I want them to be separated into different event, so basically its just "abrtd (pid 2637)-running" as one event. So basically I suppose having rows do not matter as long events are splitted apart as its own.