Can someone tell me how to use the line breaker parameter fo the below events which is currently getting clustered together .
{"sdsf shcdzvdvv zdcnvdzvvdd."}
{bfdf dvdfd dfdfdf ddgvdvdfd."}
{dfdfd dfdfd dgdgd dgdgdgdgg."}
Props .conf
LINE_BREAKER = (\.\"\})
A key thing to remember about LINE_BREAKER is the text matched by the first capture is discarded.
Based on my assumption that each event starts with a left brace this setting may work:
LINE_BREAKER = ([\r\n]+)\{