By ggomez - 23 Oct 2024
Hi, I have a log file with multiple lines that are different:
line 1 - 6:46:16 (@-SLOG@) Timestamp Time: Fri Aug 11 2023 06:46:16 UTC
line 2 - 7:47:58 ) IN: "c" name@server1.com
line 3 - 7:57:58 ) OUT: "c" name@server1.com
When I import file it gives me today's date by default.
I would like to have:
date , timestamp, in or out, name, server
with date being on the Timestamp line and every line below has that same date until the next date
How can I create the date column based on the timestamp value and parse the rest based on line 2 rules
|
By LogViewPlus Support - 24 Oct 2024
Hi,
Currently, it is not possible to parse the date from one log line and apply it to other log lines without writing a custom parser or (possibly) a post processor. The best you will be able to do in this case is to extract the timestamp and apply a default or metadata date.
Hope that helps,
Toby
|
|