Formatting log data question

dbcase — Wed, 15 Feb 2017 18:58:23 GMT

Hi,

I have the below log data. It appears to be all one line. What I'd like to do is:

Have a separate event everytime there is a new LogMessage dateTime
discard the <?xml version="1.0" encoding="UTF-8" ?><LogData version="1.0">
extract the fields:
dateTime severity pid pname client

I'm not quite sure where to begin.... Any thoughts?

`<?xml version="1.0" encoding="UTF-8" ?><LogData version="1.0">`<LogMessage dateTime="2017-02-14T20:17:06.000-08:00" severity="Notice" pid="7675" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7675) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:52.000-08:00" severity="Notice" pid="7629" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7629) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:36.000-08:00" severity="Notice" pid="7573" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7573) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:21.000-08:00" severity="Notice" pid="7521" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7521) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:05.000-08:00" severity="Notice" pid="7467" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7467) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:15:49.000-08:00" severity="Notice" pid="7397" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7397) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:15:34.000-08:00" severity="Notice" pid="7345" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7345) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:15:18.000-08:00" severity="Notice" pid="7283" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7283) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:15:03.000-08:00" severity="Notice" pid="7237" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7237) start to connect to server stunnel.</LogMessage>

Re: Formatting log data question

dbcase — Wed, 15 Feb 2017 19:45:09 GMT

its a snippet..... Here is the beginning some of the middle and end entry

<?xml version="1.0" encoding="UTF-8" ?><LogData version="1.0"><LogMessage dateTime="2017-02-14T20:17:06.000-08:00" severity="Notice" pid="7675" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7675) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:52.000-08:00" severity="Notice" pid="7629" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7629) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:36.000-08:00" severity="Notice" pid="7573" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7573) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:16:21.000-08:00" severity="Notice" pid="7521" pname="stunnel">CLIENT: /usr/local/bin/stunnel(7521) start to connect to server stunnel.</LogMessage>pname="stunnel">CLIENT: /usr/local/bin/stunnel(5799) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:07:46.000-08:00" severity="Notice" pid="5739" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5739) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:07:31.000-08:00" severity="Notice" pid="5685" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5685) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:07:15.000-08:00" severity="Notice" pid="5635" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5635) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:07:00.000-08:00" severity="Notice" pid="5579" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5579) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:06:44.000-08:00" severity="Notice" pid="5529" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5529) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:06:29.000-08:00" severity="Notice" pid="5475" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5475) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:06:13.000-08:00" severity="Notice" pid="5423" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5423) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:05:58.000-08:00" severity="Notice" pid="5371" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5371) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:05:42.000-08:00" severity="Notice" pid="5313" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5313) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:05:27.000-08:00" severity="Notice" pid="5265" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5265) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:05:11.000-08:00" severity="Notice" pid="5203" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5203) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:04:56.000-08:00" severity="Notice" pid="5155" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5155) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:04:40.000-08:00" severity="Notice" pid="5109" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5109) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:04:25.000-08:00" severity="Notice" pid="5047" pname="stunnel">CLIENT: /usr/local/bin/stunnel(5047) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:04:09.000-08:00" severity="Notice" pid="4997" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4997) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:03:54.000-08:00" severity="Notice" pid="4943" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4943) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:03:38.000-08:00" severity="Notice" pid="4889" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4889) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:03:23.000-08:00" severity="Notice" pid="4841" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4841) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:03:07.000-08:00" severity="Notice" pid="4783" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4783) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:02:52.000-08:00" severity="Notice" pid="4735" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4735) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:02:36.000-08:00" severity="Notice" pid="4677" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4677) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:02:21.000-08:00" severity="Notice" pid="4627" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4627) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:02:05.000-08:00" severity="Notice" pid="4577" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4577) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:01:50.000-08:00" severity="Notice" pid="4517" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4517) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:01:34.000-08:00" severity="Notice" pid="4467" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4467) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:01:19.000-08:00" severity="Notice" pid="4419" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4419) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:01:03.000-08:00" severity="Notice" pid="4359" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4359) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:00:48.000-08:00" severity="Notice" pid="4313" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4313) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:00:46.000-08:00" severity="Notice" pid="4301" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4301) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:00:32.000-08:00" severity="Notice" pid="4253" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4253) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:00:17.000-08:00" severity="Notice" pid="4201" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4201) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T20:00:01.000-08:00" severity="Notice" pid="4147" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4147) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:59:46.000-08:00" severity="Notice" pid="4095" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4095) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:59:30.000-08:00" severity="Notice" pid="4045" pname="stunnel">CLIENT: /usr/local/bin/stunnel(4045) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:59:15.000-08:00" severity="Notice" pid="3988" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3988) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:58:59.000-08:00" severity="Notice" pid="3934" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3934) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:58:44.000-08:00" severity="Notice" pid="3828" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3828) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:58:28.000-08:00" severity="Notice" pid="3770" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3770) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:58:13.000-08:00" severity="Notice" pid="3724" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3724) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:57:57.000-08:00" severity="Notice" pid="3672" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3672) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:57:42.000-08:00" severity="Notice" pid="3612" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3612) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:57:26.000-08:00" severity="Notice" pid="3560" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3560) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:57:11.000-08:00" severity="Notice" pid="3508" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3508) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:56:55.000-08:00" severity="Notice" pid="3456" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3456) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:56:40.000-08:00" severity="Notice" pid="3402" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3402) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:56:24.000-08:00" severity="Notice" pid="3350" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3350) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:56:09.000-08:00" severity="Notice" pid="3294" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3294) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:55:53.000-08:00" severity="Notice" pid="3244" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3244) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:55:38.000-08:00" severity="Notice" pid="3192" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3192) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:55:22.000-08:00" severity="Notice" pid="3140" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3140) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:55:06.000-08:00" severity="Notice" pid="3080" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3080) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:54:51.000-08:00" severity="Notice" pid="3032" pname="stunnel">CLIENT: /usr/local/bin/stunnel(3032) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:54:35.000-08:00" severity="Notice" pid="2982" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2982) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:54:20.000-08:00" severity="Notice" pid="2924" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2924) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:54:04.000-08:00" severity="Notice" pid="2872" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2872) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:53:48.000-08:00" severity="Notice" pid="2820" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2820) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:53:32.000-08:00" severity="Notice" pid="2762" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2762) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:53:17.000-08:00" severity="Notice" pid="2710" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2710) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:53:01.000-08:00" severity="Notice" pid="2656" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2656) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:52:46.000-08:00" severity="Notice" pid="2606" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2606) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:52:30.000-08:00" severity="Notice" pid="2554" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2554) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:52:15.000-08:00" severity="Notice" pid="2498" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2498) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:51:59.000-08:00" severity="Notice" pid="2448" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2448) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:51:44.000-08:00" severity="Notice" pid="2386" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2386) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:51:28.000-08:00" severity="Notice" pid="2338" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2338) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:51:12.000-08:00" severity="Notice" pid="2292" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2292) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:50:57.000-08:00" severity="Notice" pid="2230" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2230) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:50:41.000-08:00" severity="Notice" pid="2180" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2180) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:50:26.000-08:00" severity="Notice" pid="2126" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2126) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:50:10.000-08:00" severity="Notice" pid="2072" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2072) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:49:54.000-08:00" severity="Notice" pid="2018" pname="stunnel">CLIENT: /usr/local/bin/stunnel(2018) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:49:39.000-08:00" severity="Notice" pid="1964" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1964) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:49:23.000-08:00" severity="Notice" pid="1916" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1916) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:49:08.000-08:00" severity="Notice" pid="1860" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1860) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:48:52.000-08:00" severity="Notice" pid="1808" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1808) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:48:37.000-08:00" severity="Notice" pid="1756" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1756) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:48:21.000-08:00" severity="Notice" pid="1696" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1696) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:48:15.000-08:00" severity="Notice" pid="1682" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1682) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:48:06.000-08:00" severity="Notice" pid="1646" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1646) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:47:50.000-08:00" severity="Notice" pid="1590" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1590) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:47:34.000-08:00" severity="Notice" pid="1538" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1538) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:47:19.000-08:00" severity="Notice" pid="1486" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1486) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:47:03.000-08:00" severity="Notice" pid="1434" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1434) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:46:48.000-08:00" severity="Notice" pid="1382" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1382) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:46:47.000-08:00" severity="Notice" pid="617" pname="dhcpcd">DHCP: Lease renewal successfully.</LogMessage><LogMessage dateTime="2017-02-14T19:46:44.000-08:00" severity="Notice" pid="1370" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1370) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:46:32.000-08:00" severity="Notice" pid="1322" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1322) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:46:17.000-08:00" severity="Notice" pid="1274" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1274) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:46:01.000-08:00" severity="Notice" pid="1218" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1218) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:45:45.000-08:00" severity="Notice" pid="1142" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1142) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:45:30.000-08:00" severity="Notice" pid="1096" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1096) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:45:14.000-08:00" severity="Notice" pid="1043" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1043) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:45:14.000-08:00" severity="Notice" pid="1042" pname="stunnel">CLIENT: /usr/local/bin/stunnel(1042) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:44:58.000-08:00" severity="Notice" pid="984" pname="stunnel">CLIENT: /usr/local/bin/stunnel(984) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:44:43.000-08:00" severity="Notice" pid="932" pname="stunnel">CLIENT: /usr/local/bin/stunnel(932) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:44:28.000-08:00" severity="Notice" pid="880" pname="stunnel">CLIENT: /usr/local/bin/stunnel(880) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:44:12.000-08:00" severity="Notice" pid="828" pname="stunnel">CLIENT: /usr/local/bin/stunnel(828) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:43:56.000-08:00" severity="Notice" pid="772" pname="stunnel">CLIENT: /usr/local/bin/stunnel(772) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:43:41.000-08:00" severity="Notice" pid="723" pname="stunnel">CLIENT: /usr/local/bin/stunnel(723) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:43:26.000-08:00" severity="Notice" pid="658" pname="stunnel">CLIENT: /usr/local/bin/stunnel(658) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:43:10.000-08:00" severity="Notice" pid="600" pname="stunnel">CLIENT: /usr/local/bin/stunnel(600) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:42:55.000-08:00" severity="Notice" pid="548" pname="stunnel">CLIENT: /usr/local/bin/stunnel(548) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:42:39.000-08:00" severity="Notice" pid="483" pname="stunnel">CLIENT: /usr/local/bin/stunnel(483) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:42:24.000-08:00" severity="Notice" pid="426" pname="stunnel">CLIENT: /usr/local/bin/stunnel(426) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:42:08.000-08:00" severity="Notice" pid="357" pname="stunnel">CLIENT: /usr/local/bin/stunnel(357) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:41:53.000-08:00" severity="Notice" pid="309" pname="stunnel">CLIENT: /usr/local/bin/stunnel(309) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:41:37.000-08:00" severity="Notice" pid="32719" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32719) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:41:22.000-08:00" severity="Notice" pid="32667" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32667) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:41:06.000-08:00" severity="Notice" pid="32616" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32616) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:40:50.000-08:00" severity="Notice" pid="32559" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32559) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:40:35.000-08:00" severity="Notice" pid="32507" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32507) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:40:19.000-08:00" severity="Notice" pid="32455" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32455) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:40:04.000-08:00" severity="Notice" pid="32401" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32401) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:39:48.000-08:00" severity="Notice" pid="32349" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32349) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:39:33.000-08:00" severity="Notice" pid="32295" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32295) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:39:17.000-08:00" severity="Notice" pid="32245" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32245) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:39:01.000-08:00" severity="Notice" pid="32183" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32183) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:38:46.000-08:00" severity="Notice" pid="32137" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32137) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:38:30.000-08:00" severity="Notice" pid="32087" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32087) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:38:14.000-08:00" severity="Notice" pid="32025" pname="stunnel">CLIENT: /usr/local/bin/stunnel(32025) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:37:59.000-08:00" severity="Notice" pid="31975" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31975) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:37:43.000-08:00" severity="Notice" pid="31921" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31921) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:37:28.000-08:00" severity="Notice" pid="31867" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31867) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:37:12.000-08:00" severity="Notice" pid="31817" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31817) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:36:56.000-08:00" severity="Notice" pid="31761" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31761) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:36:41.000-08:00" severity="Notice" pid="31711" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31711) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:36:25.000-08:00" severity="Notice" pid="31655" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31655) start to connect to server stunnel.</LogMessage><LogMessage dateTime="2017-02-14T19:36:10.000-08:00" severity="Notice" pid="31603" pname="stunnel">CLIENT: /usr/local/bin/stunnel(31603) start to connect to server stunnel.</LogMessage></LogData>[root@splunkmsologs beta_cameras]#

topic Re: Formatting log data question in Splunk Search

Formatting log data question

Re: Formatting log data question

Re: Formatting log data question

Re: Formatting log data question

Re: Formatting log data question