|
Group: Forum Members
Posts: 3,
Visits: 5
|
Hi newbie here without a clue on the parsing..... What I'm trying to do is get the something from the following log file.
09:55:19.09 [DISP] PBX: Received Call Status [Address=581]: Call [Ref=0x00202aae] [State=Idle] [Reason=Transfer].
09:55:19.10 [DISP] QControl: Update agent state for [NameId=405], [Address=581] to [State=Login, Ready, Worktime, AutoWorkTime].
09:55:19.10 [DISP] PBX: Received Call Status [Address=581]: Call [Ref=0x00202ab0] [State=Idle] [Reason=Transfer].
The parser wizard parses the time but then then everything else is parsed as a message.
1. What I would like is is to have the the six-characters starting and ending with brackets to be a field say "Source" This would be for the [DISP] field.
2. Then there is a space and a variable number of characters that terminate in in a colon. The PBX: QControl: field. might call this "FROM"
3. Everything after the colon plus a space can be the message field.
TIME ----- SOURCE ----- FROM ----- MESSAGE
|