Hi, I have a log file with multiple lines that are different:
line 1 - 6:46:16  (@-SLOG@) Timestamp Time: Fri Aug 11 2023 06:46:16 UTC
line 2 - 7:47:58 ) IN: "c" name@server1.com
line 3 - 7:57:58 ) OUT: "c" name@server1.com

When I import file it gives me today's date by default.
I would like to have:
date , timestamp, in or out, name, server
with date being on the Timestamp line and every line below has that same date until the next date

How can I create the date column based on the timestamp value and parse the rest based on line 2 rules

Hi,

Currently, it is not possible to parse the date from one log line and apply it to other log lines without writing a custom parser or (possibly) a post processor.  The best you will be able to do in this case is to extract the timestamp and apply a default or metadata date.

Hope that helps,

Toby