In a log file that has multiple events with the same timestamp, how can each one of these to be ingested as a separate event and insert milliseconds during the indexing time?

JJagadeesh — Mon, 07 May 2018 17:09:26 GMT

Hi,

I have a log file that has multiple events with the same timestamp.
Foe instance:
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - xyz
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - zbc
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - 124
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - zbc4
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - zbc45g

I would like each one of these to be ingested as a separate event. Looking at the log file there seem to be no milliseconds, how can I insert milliseconds during the indexing time?

OR is there any other way to solve this issue so that the ordering is maintained.
Thanks,
JJ

topic In a log file that has multiple events with the same timestamp, how can each one of these to be ingested as a separate event and insert milliseconds during the indexing time? in Getting Data In

In a log file that has multiple events with the same timestamp, how can each one of these to be ingested as a separate event and insert milliseconds during the indexing time?