Hello Zubair, I tested this on the sample data that you put and it seems to work. Give it a shot and tell me if it works for you 🙂  [json_test] SHOULD_LINEMERGE=false LINE_BREAKER=([,\r\n]+){ CHARSET=AUTO TIME_PREFIX="event_time"\:\s MAX_TIMESTAMP_LOOKAHEAD=13 SEDCMD-removestart=s/^{[\s\S]*?\s*\[// SEDCMD-removeend=s/],\r\n"count[\s\S]*\r\n}// kv_mode=json ... View more