Timestamp broken up by a |

[ubko]

I have events in a file with fields separated by "|" (e.g. blah|blah|20120406|095040|blah|blah).

Can I use this to pick out the date?

TIME_PREFIX = ^(?:[^\|]*\|){2}

How would I combine the time?

[araitz]

Edit to reflect event given in comment below:

TIME_PREFIX=^(([^\|]+)?\|){16}
TIME_FORMAT=%Y%m%d|%H%M%S

[ubko]

This works:

TIME_PREFIX=^(([^|]*)|){16}

Thanks.

[araitz]

Yes, I would not expect it to work because the sample event above looks nothing like the event you just posted and the regex isn't properly constructed.

[ubko]

Doesn't work. Here's a sample event:

10|0012028284||55351|J|H|2|1|0|N|N|0|1|15-4-01 S 5||0|20110209|154343|20110209|154343|20110209|234343|1|1|0|1|0|0|-1|-1|

Here's the props.conf:

[test]
REPORT-test = test_fields
TIME_PREFIX = ^(([^|]+)|){16}
TIME_FORMAT = %Y%m%d|%H%M%S