Hello
I'm using Splunk cloud, i have jenkins logs indexed to my system but for some reason breaks
I took an output example and add it to Splunk with the "Add Data" option and there it looks ok but when im searching for the sourcetype it is still broken.
What is the best way to parse jenkins logs ?
this is my sourcetype configuration :
[ console_logs ]
CHARSET=UTF-8
LINE_BREAKER=([\r\n]+)
NO_BINARY_CHECK=true
SHOULD_LINEMERGE=true
category=Structured
disabled=false
pulldown_type=true
and i want it to be shown with the bulks :
<time> Started by user
<time> Finished:
@sarit_s6 - Kindly provide sample raw data and tell how you would like to see the events being broken, so we can help.