I can't seem to get this working, logs are getting confused about the time format since it is Day Month Year.
the log is in /var/log/holly/alarms.20120307-001.log
TIME_PREFIX = ^
TIME_FORMAT = %d/%m/%y %H:%M:%S;
If I change the source to [source::/var/log/holly/alarms.*.log] it now works,
Grrr. I think I see the typo, the " at the see of the source.
View solution in original post