My events have the following timestamp at the beginning of each line:
In props.conf, I set the following but it is not working:
Any ideas on why this is not working?
TIME_PREFIX = ^\[
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%3N%z
Also leave out the TZ line because the event has the timezone already (you just need to specify that it is there).
View solution in original post
Thank you! That made the difference.