Hi Folks.
Could you please help me write the Time_perfix and Time_format extraction for below events.
07:22:50,932 INFO [Timer-5] impl.NotificationLogServiceImpl - [logBefore] - **** Entering the method **** com.monsanto.wms.service.tools.impl.NotificationLogServiceImpl.saveNotificationLog(com.monsanto.wms.persistence.model.NotificationLog,java.lang.Long)
07:22:50,932 INFO [Timer-5] impl.AlertTypeServiceImpl - [logBefore] - **** Entering the method **** com.monsanto.wms.service.tools.impl.AlertTypeServiceImpl.findById(java.lang.Long)
hey @Iksridhar
Please find below TIME_FORMAT and TIME_PREFIX extractions
TIME_FORMAT = %H:%M:%S,%3N
TIME_PREFIX = ^
Let me know if this helps you!
Unrelated to the question, but also worth noting, the rest of the index-time coniguration for that sourcetype may look like:
LINE_BREAKER = ([\n\r]+)\d{2}:\d{2}:\d{2},\d{3}\s
SHOULD_LINEMERGE = false
This will ensure you only get new events when the line starts with that timestamp.