I didn't see an edit button so I apologize if I just missed it, but I wanted to include our transforms.conf stanzas as well for completeness: [ihs_stats_setnull] REGEX = ^[-|,]* DEST_KEY = queue FORMAT = nullQueue [ihs_stats_setnull_2] REGEX = ^[-|,]{0,18}\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}[-|,]* DEST_KEY = queue FORMAT = nullQueue We found that the log itself does not seem to break lines properly all the time as occasionally there will just be a line like these: -,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-,- -,-,-,-,-,-,-,-,-,10.240.121.86,-,-,-,-,-,-,-,-,-,-,- We are trying to send those to the nullQueue.
... View more