what would be the perfect props.conf for this event

[abhishekkalokhe]

Date=2020-02-10|StrtTime=09:56:08|EndTime=09:56:08|Duration=7|EvntType=MSG|UUID=

props that i am using :

TIME_PREFIX = ^
TIME_FORMAT = %Y-%m-%d
MAX_TIMESTAMP_LOOKAHEAD = 40
LINE_BREAKER = Date=\d+-\d+-\d+
TRUNCATE = 9999
SHOULD_LINEMERGE = false
CHARSET=UTF-8
disabled=false

can i use TIME_FORMAT = %Y-%m-%d OR do i have to use TIME_FORMAT = %Y-%m-%d|StrtTime=%H:%M:%S

[nickhills · Accepted solution]

Set the prefix to exclude "date=": TIME_PREFIX = ^Date=
Set the lookahead so it only catches the first time: MAX_TIMESTAMP_LOOKAHEAD = 28
Your timeformat example should (i think) work: TIME_FORMAT = %Y-%m-%d|StrtTime=%H:%M:%S