In which file can the SH0ULD_LINEMERCE setting be modified?
The SHOULD_LINEMERGE setting is used in Splunk to control whether or not multiple lines of an event should be combined into a single event. This setting is configured in the props.conf file, where Splunk handles data parsing and field extraction. Setting SHOULD_LINEMERGE = true merges lines together based on specific rules.
Splunk Documentation Reference: props.conf - SHOULD_LINEMERGE
Carmen
10 hours agoFairy
6 days agoLawanda
11 days agoBobbie
16 days agoMariko
2 months agoAja
2 months agoWei
2 months ago