spix
(SPIX)
February 23, 2021, 9:57pm
1
Hi,
I try to get a special log parsed which is pipe delimited. One of the fields consists of the following timestamp layout:
22:05:47,730 CET 02/23/2021
Does somebody now how to dissect this one? I have the hardest time with the space in front of the TIMEZONE.
spix
(SPIX)
February 23, 2021, 10:08pm
2
So apparently just asking the question helped. I am now a but further. The CET seems to be no parsed with the TZ (timezone pattern) But with something as simple as {WORD} or CET it does.
(?<date>%{HOUR}:%{MINUTE}:%{SECOND} %{WORD})
Now let’s look at the date
cawfehman
(Cawfehman)
February 26, 2021, 8:01pm
3
%{DATE_US} should capture it
system
(system)
Closed
March 12, 2021, 8:02pm
4
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.