LogViewPlus Support » LogViewPlus Support » Configuration & Customization » Pattern for Parsing "2021-12-02T07:13:24.5072497Z"

Pattern for Parsing "2021-12-02T07:13:24.5072497Z"

klacol — Thu, 02 Dec 2021 09:10:16 GMT

Hi all, I am using LogViewPlus, and it is working very well.

Now I came over a log file, that has Json entries and the date and time is provided like this:
[code]2021-12-02T07:13:24.5072497Z[/code]
I tried to use this pattern,
[code]%d{yyyy-MM-ddTHH:mm:ss.fffffffzzz}[/code]
but it says "Timestamp not found for log entry".

Does anybody know, how which pattern would work?

RE: Pattern for Parsing "2021-12-02T07:13:24.5072497Z"

LogViewPlus Support — Thu, 02 Dec 2021 09:10:16 GMT

Glad that helped - thanks for letting me know.

Toby

RE: Pattern for Parsing "2021-12-02T07:13:24.5072497Z"

klacol — Thu, 02 Dec 2021 08:34:24 GMT

Thanks Toby, thats works; have changed it in the settings.

RE: Pattern for Parsing "2021-12-02T07:13:24.5072497Z"

LogViewPlus Support — Thu, 02 Dec 2021 08:04:20 GMT

Hi Klacol,

'Z' in a timestamp is used to indicate Zero time - or UTC-0. It is not a standard timezone and cannot be understood with the standard timezone patterns. It is actually considered a literal rather than a timezone (similar to 'T').

The correct way to parse this is with a Z:
[code]%d{yyyy-MM-ddTHH:mm:ss.fffffffZ}[/code]

%d on it's own will also work, but this is not recommended. %d tells LogViewPlus to 'just figure it out'. LogViewPlus is pretty good at figuring dates out, but this approach is a little slower. Also, it is always better to parse more accurately where possible.

Hope that helps,

Toby

RE: Pattern for Parsing "2021-12-02T07:13:24.5072497Z"

klacol — Thu, 02 Dec 2021 07:53:58 GMT

I is simpler, this works:

[code]%d{}[/code]