I have a log file which is being sent to Splunk. When I search, I see 257 lines per 1 event and remaining lines as separate events.
I tried below, however it is not working.
cat ~/local/props.conf
[task_breakdown]
SHOULD_LINEMERGE = False
LINE_BREAKER = [\n\r]+
TRUNCATE = 999999
NO_BINARY_CHECK = true
↧