https://community.splunk.com/t5/Getting-Data-In/Parsing-time-format-with-random-words-between-date-and-time/m-p/396572#M70676 <P>@bobmacks for TIME_PREFIX, I don't see where the string DATE exists in your sample data. Is this the case?</P> Thu, 28 Feb 2019 19:48:11 GMT integratorz 2019-02-28T19:48:11Z https://community.splunk.com/t5/Getting-Data-In/Parsing-time-format-with-random-words-between-date-and-time/m-p/396571#M70675 <P>Hi,</P> <P>I'm attempting to extract data and time from a custom text file where date and time are split across two lines and contains two different combination of words in between them. A sample data I'm trying to ingest looks like...</P> <PRE><CODE>PAGE 1 20-02-2019 ABC 08.03.45 data.... PAGE 2 20-02-2019 DEF 08.50.12 data.... </CODE></PRE> <P>The TIME_PREFIX is pretty straightforward but I'm stuck with how to define TIME_FORMAT to handle the inconsistent characters (i.e. ABC vs DEF) between the date and time fields. </P> <PRE><CODE> TIME_PREFIX=^DATE\s{1}\d{1}\s{4} TIME_FORMAT=%d-%m-%Y%n??? %H.%M.%S </CODE></PRE> Tue, 29 Sep 2020 23:20:56 GMT https://community.splunk.com/t5/Getting-Data-In/Parsing-time-format-with-random-words-between-date-and-time/m-p/396571#M70675 bobmacks 2020-09-29T23:20:56Z https://community.splunk.com/t5/Getting-Data-In/Parsing-time-format-with-random-words-between-date-and-time/m-p/396572#M70676 <P>@bobmacks for TIME_PREFIX, I don't see where the string DATE exists in your sample data. Is this the case?</P> Thu, 28 Feb 2019 19:48:11 GMT https://community.splunk.com/t5/Getting-Data-In/Parsing-time-format-with-random-words-between-date-and-time/m-p/396572#M70676 integratorz 2019-02-28T19:48:11Z