Assuming the stanza [Reports5min] points to the right sourcetype, try placing a capture group in the regex property, like this: REGEX = ^(null,null,0,null,null,null,null,null,null,)$ Also are you s...
See more...
Assuming the stanza [Reports5min] points to the right sourcetype, try placing a capture group in the regex property, like this: REGEX = ^(null,null,0,null,null,null,null,null,null,)$ Also are you sure there is ni blacnk spaces at the end of each line? The rest of the settinggs seems fine.