Hi,

I'm trying to parse a logcat file, which is like below:

01-01 00:03:31.788 591 591 W SELinux : Multiple same specifications for qti.ims.ext.
06-16 12:49:15.390 734 1334 I abc : type=1400 audit(0.0:18414): avc: denied { read } for abc
06-16 12:49:15.390 734 734 I e : something here
06-16 12:49:15.403 1502 1668 I Engine: vs_get_temperature: read[0] skin-therm 33922 mC, weight[0] 553


I create one parse rule like below:
%d{MM-dd %H:mm:ss.fff} %t %t %p %c:%m%n

but the output is not correct, as below, output exist 3 problem:
1. line 2,3,4 mixed
2. subpid is missing.
3. the space between pid and subpid is not fixed value. It may be 2 or 3, depends on the length of subpid. I can't find one way to handle such case.


Could you please kindly help me here? 

Thanks!