Date=2020-02-10|StrtTime=09:56:08|EndTime=09:56:08|Duration=7|EvntType=MSG|UUID=
props that i am using :
TIME_PREFIX = ^
TIME_FORMAT = %Y-%m-%d
MAX_TIMESTAMP_LOOKAHEAD = 40
LINE_BREAKER = Date=\d+-\d+-\d+
TRUNCATE = 9999
SHOULD_LINEMERGE = false
CHARSET=UTF-8
disabled=false
can i use TIME_FORMAT = %Y-%m-%d OR do i have to use TIME_FORMAT = %Y-%m-%d|StrtTime=%H:%M:%S
Set the prefix to exclude "date=": TIME_PREFIX = ^Date=
Set the lookahead so it only catches the first time: MAX_TIMESTAMP_LOOKAHEAD = 28
Your timeformat example should (i think) work: TIME_FORMAT = %Y-%m-%d|StrtTime=%H:%M:%S
Set the prefix to exclude "date=": TIME_PREFIX = ^Date=
Set the lookahead so it only catches the first time: MAX_TIMESTAMP_LOOKAHEAD = 28
Your timeformat example should (i think) work: TIME_FORMAT = %Y-%m-%d|StrtTime=%H:%M:%S