Could you please help me write the timestamp extraction for below events.

[lksridhar]

Hi Folks.

Could you please help me write the Time_perfix and Time_format extraction for below events.

07:22:50,932 INFO [Timer-5] impl.NotificationLogServiceImpl - [logBefore] - **** Entering the method **** com.monsanto.wms.service.tools.impl.NotificationLogServiceImpl.saveNotificationLog(com.monsanto.wms.persistence.model.NotificationLog,java.lang.Long)
07:22:50,932 INFO [Timer-5] impl.AlertTypeServiceImpl - [logBefore] - **** Entering the method **** com.monsanto.wms.service.tools.impl.AlertTypeServiceImpl.findById(java.lang.Long)

[mayurr98]

hey @Iksridhar
Please find below TIME_FORMAT and TIME_PREFIX extractions

TIME_FORMAT = %H:%M:%S,%3N
TIME_PREFIX = ^

Let me know if this helps you!

[micahkemp]

Unrelated to the question, but also worth noting, the rest of the index-time coniguration for that sourcetype may look like:

LINE_BREAKER = ([\n\r]+)\d{2}:\d{2}:\d{2},\d{3}\s
SHOULD_LINEMERGE = false

This will ensure you only get new events when the line starts with that timestamp.