Posted by: Pdfprep
Post Date: October 27, 2020
When using the props.conf LINE_BREAKER attribute to delimit multi-line events, the SHOULD_LINEMERGE attribute should be set to what?
A . Auto
B . None
C . True
D . False
Answer: C
Explanation:
Reference: https://answers.splunk.com/answers/6926/how-to-keep-data-together-as-one-event.html
Leave a Reply