How to fetch date field from raw logs?

[aditsss]

Hi Team,

How can I fetch raw log

2023-07-13 02:37:14.317 [INFO ] [pool-2-thread-1] FileSensor - Total msg processed for trim reage file:241

• host = lgposput50341.gso.aexp.com
• source = /app/abs-upstreamer/logs/abs-upstreamer.log
• sourcetype = 600000304_gg_abs_ipc2

[ITWhisperer]

If you have configured your sourcetype correctly, the _time field should have picked up the timestamp. Please check that this is the case.

[aditsss]

@ITWhisperer 

I want to extract date please guide.

[ITWhisperer · Accepted solution]

| rex "^(?<date>\d{4}-\d{2}-d{2})"