Question for parsing a log with multiple lines

ggomez — Thu, 24 Oct 2024 16:55:21 GMT

Hi, I have a log file with multiple lines that are different:
line 1 - 6:46:16 (@-SLOG@) Timestamp Time: Fri Aug 11 2023 06:46:16 UTC
line 2 - 7:47:58 ) IN: "c" name@server1.com
line 3 - 7:57:58 ) OUT: "c" name@server1.com

When I import file it gives me today's date by default.
I would like to have:
date , timestamp, in or out, name, server
with date being on the Timestamp line and every line below has that same date until the next date

How can I create the date column based on the timestamp value and parse the rest based on line 2 rules

RE: Question for parsing a log with multiple lines

LogViewPlus Support — Thu, 24 Oct 2024 16:55:21 GMT

Hi,

Currently, it is not possible to parse the date from one log line and apply it to other log lines without writing a custom parser or (possibly) a post processor. The best you will be able to do in this case is to extract the timestamp and apply a default or metadata date.

Hope that helps,

Toby

LogViewPlus Support » LogViewPlus Support » Configuration & Customization » Question for parsing a log with multiple lines

Question for parsing a log with multiple lines

RE: Question for parsing a log with multiple lines