Home
Join the Community
Getting Started
Welcome
Be a Splunk Champion
SplunkTrust
Super User Program
Tell us what you think
Splunk Love
Community Feedback
Find Answers
Splunk Administration
Getting Data In
Deployment Architecture
Monitoring Splunk
Using Splunk
Splunk Search
Dashboards & Visualizations
Splunk Platform
Splunk Enterprise
Splunk Cloud Platform
Premium Solutions
Splunk Enterprise Security
Splunk Observability Cloud
Splunk ITSI
Splunk SOAR
News & Education
Blog & Announcements
Community Blog
Product News & Announcements
Training & Certification
Training + Certification Discussions
Training & Certification Blog
Events
Events
Tech Talks: Technical Deep Dives
Office Hours: Ask the Experts
User Groups
Apps & Add-ons
All Apps and Add-ons
All Apps and Add-ons
Splunk Development
Splunk Dev
Resources
SplunkBase
Developers
Documentation
Splunk Ideas
Sign In
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
All community
Knowledge base
sander
Users
Products
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Ask a Question
About sander
sander
Loves-to-Learn
Member since:
09-26-2023
11-02-2023
Community Statistics
Posts
1
Solutions
0
Karma Given
0
Karma Received
0
Member Since
09-26-2023
View all badges
Activity Feed
Posted
Re: Why is my LINE_BREAKER is not working?
on
Getting Data In
.
09-26-2023
02:47 PM
Topics I've Started
No posts to display.
View All
Latest Contributions by sander
Topics sander has Participated In
Latest Contributions by sander
Re: Why is my LINE_BREAKER is not working?
by
sander
in
Getting Data In
09-26-2023
02:47 PM
09-26-2023
02:47 PM
Hi Berfomet96, Can you try below line breaker regex: LINE_BREAKER = ([\r\n]+)\w{3}\s+\d{1,2}\s\d{2}:\d{2}:\d{2} Also your TIME_PREFIX and TIME_FORMAT do not seem to match as eventtime is an epoch timestamp.
... View more
Contact Me
Online Status
Offline
Date Last Visited
11-02-2023
01:48 PM