Getting Data In

Parsing time_format with random words between date and time



I'm attempting to extract data and time from a custom text file where date and time are split across two lines and contains two different combination of words in between them. A sample data I'm trying to ingest looks like...

PAGE 1    20-02-2019
ABC       08.03.45

PAGE 2    20-02-2019
DEF       08.50.12

The TIME_PREFIX is pretty straightforward but I'm stuck with how to define TIME_FORMAT to handle the inconsistent characters (i.e. ABC vs DEF) between the date and time fields.

 TIME_FORMAT=%d-%m-%Y%n???       %H.%M.%S
Tags (1)

Path Finder

@bobmacks for TIME_PREFIX, I don't see where the string DATE exists in your sample data. Is this the case?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!