Getting Data In
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results forย 
Search instead forย 
Did you mean:ย 
Ask a Question

In a log file that has multiple events with the same timestamp, how can each one of these to be ingested as a separate event and insert milliseconds during the indexing time?

JJagadeesh
New Member
โ€Ž05-07-2018 10:09 AM

Hi,

I have a log file that has multiple events with the same timestamp.
Foe instance:
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - xyz
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - zbc
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - 124
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - zbc4
2018-01-06 00:24:01 - ! [476] Mail is not enabled for agent notifications - zbc45g

I would like each one of these to be ingested as a separate event. Looking at the log file there seem to be no milliseconds, how can I insert milliseconds during the indexing time?

OR is there any other way to solve this issue so that the ordering is maintained.
Thanks,
JJ

0 Karma
Reply