×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
tmarrazzo
Engager
Member since: ‎04-13-2015
‎06-05-2020
Community Statistics
Posts 1
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎04-13-2015
Topics I've Started
No posts to display.
View All

Re: Why are my multi-line events getting broken in...

by in Getting Data In
‎02-09-2017 09:44 PM
‎02-09-2017 09:44 PM
Very strange. This was the props.conf which I created to test with: [not-breaking] TRUNCATE = 0 SHOULD_LINEMERGE = false LINE_BREAKER = ([\r\n]+)(?:FATAL[\s]+|ERROR[\s]+|INFO[\s]+|WARN[\s]+|DEBUG[\s]+) MAX_EVENTS = 100000 TIME_FORMAT = %Y-%m-%d %H:%M:%S,%3N Are you using something similar? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma from
View All