How to wok with event Linebreaking

[gajananh999]

Hello Everyone,

I have one IIS Log files

example :
2013-01-23 00:00:00.444 "AEPLWEB2" "66.249.74.162" /research/userreviews/reviewdetails.aspx rid=114 "E:\sites\carwale\research\userreviews\reviewdetails.aspx" 200 - 0 15036 306 - - "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 05:30:00.444 436 0 "WWW.CARWALE.COM" 192.168.1.15 80 3.944 - "HTTP/1.1" "http" GET "www.carwale.com" 2013-01-23 00:00:00.444 2013-01-23 11.37 - 2013-01-23 00:00:00.008

When i input this file the by default time stamp taken was 2013-01-23 00:00:00.444 But According to IST i want make time stamp as 2013-01-23 05:30:00.444 as made bold in line also.

How can i do this. How can i create Timestamp.?

Thanks a regrads,
Gajanan Hiroji

[martin_mueller]

Specifying \)"\s+ as timestamp prefix appears to pick out the 05:30:00.444 together with the second 2013-01-23 later in the line.

Edit: The closing parenthesis appears to be part of the referer, hence bad to use - (\S+\s+){15} with appropriate values for the max lookahead should do the same.