TIME_PREFIX

[sathiyasun]

Can you please let me know the TIME_PREFIX  & TIME_FORMAT for the below log type.

00:0009:00000:00000:2024/04/12 12:14:02.34 kernel extended error information
00:0009:00000:00000:2024/04/12 12:14:02.34 kernel  read returning -1 state 1
00:0009:00000:00000:2024/04/12 12:14:02.34 kernel nrpacket: recv, Connection timed out, spid: 501, suid: 84

[isoutamo · Accepted solution]

Hi

something like

TIME_PREFIX=^\d+:\d+:\d+:\d+:
TIME_FORMAT=%Y/%m/%d %H:%M:%S.%2Q

r. Ismo