Parsing smsts.log file


Author
Message
eugenius
eugenius
New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)New Member (19 reputation)
Group: Forum Members
Posts: 2, Visits: 9
Hi,

I'm trying to parse a smsts.log file, which is like below:
<![LOG[ log text mesage]LOG]!><time="16:33:53.212-60" date="06-11-2020" component="InstallSoftware" context="" type="1" thread="2168" file="downloadcontent.cpp:526">


I want to parse and display the text like below:
"log text mesage" in a "Log Text" column
"06-11-2020" and "16:33:53" if possible in a single "Date/Time" column, like "11.06.2020 16:33:53"  ;  if not, these can be in 2 separate "Date" and "Time" columns
"InstallSoftware" in a "Component" column
"2168" in a thread column

Can you please help me to get started?
I've tried with the Parser Wizard but, due to my inexperience, I can't get a valid configuration.

Thank you.
Reply
LogViewPlus Support
LogViewPlus Support
Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)Supreme Being (12K reputation)
Group: Moderators
Posts: 1.2K, Visits: 4.3K
Looking at this a bit more closely, there are a few issues.

The first is that the date column is missing and needs to be added manually.  I am not sure why this is happening - it could be a bug.  I will take a closer look and get back to you.  In the meantime, you can add the date column from the grid column context menu:



The second is the timestamp 16:33:53.212-60.  What is the "-60"?  I have not seen this format before.  I believe LogViewPlus will treat this as a timezone offset and subtract 60 hours - which doesn't make sense.  

Assuming -60 is constant with the log files you are viewing, you would get a better parse if you ignore it with:

time="%d{%H:mm:ss.fff}-60"


Hope that helps,

Toby

GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...





Similar Topics

Login

Explore
Messages
Mentions
Search