I tried to check some logs but there are some logs with exactly the same fields but still merged on the same line. Here are the ff links I tried: https://answers.splunk.com/answers/511589/how-to-configure-line-breaking-for-my-sample-json.html https://answers.splunk.com/answers/558993/how-to-prevent-splunk-from-merging-few-json-string.html https://answers.splunk.com/answers/171197/how-to-get-two-lines-of-json-to-break-as-two-event.html?utm_source=typeahead&utm_medium=newquestion&utm_campaign=no_votes_sort_relev ... View more