Yes, you are right, 1 line of data is 1 message. But, I am trying to parse a log data in Common Event Format (CEF). As you can see in the attached file, single CEF message is start with "CEF" and CEF messages are comming without a newline char. So, what my opinion is that read the message from tcp socket in length of packet buffer size. So, 1 line of data is the data in tcp packet with buffer size. Then, I parse the incoming messages in a FlexOperator.
I did the parsing CEF events in a file like attached file, but now I am trying same thing with tcp socket.
